|
9D1000
|
unkown
|
page execute and read and write
|
 |
|
|
| Name: |
00000003.00000002.2262912878.00000000009D1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
9D1000
|
| Size: |
393216
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Found malware configuration |
AV Detection |
|
| Yara detected Amadeys stealer DLL |
Stealing of Sensitive Information |
|
| Sample uses string decryption to hide its real strings |
AV Detection |
|
|
|
9D1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399736911.00000000009D1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
9D1000
|
| Size: |
393216
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Yara detected Amadeys stealer DLL |
Stealing of Sensitive Information |
|
|
|
E01000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200211244.0000000000E01000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E01000
|
| Size: |
393216
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Yara detected Amadeys stealer DLL |
Stealing of Sensitive Information |
|
|
|
9D1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2230041079.00000000009D1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
9D1000
|
| Size: |
393216
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Yara detected Amadeys stealer DLL |
Stealing of Sensitive Information |
|
|
|
3E6E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206268804.0000000003E6E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E6E000
|
| Size: |
8192
|
|
|
341F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267726818.000000000341F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
341F000
|
| Size: |
4096
|
|
|
3CFF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237393189.0000000003CFF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3CFF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174488368.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160474857.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
64F0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207304699.00000000064F0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
64F0000
|
| Size: |
8192
|
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219280120.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
45A1000
|
| Size: |
65536
|
|
|
7B0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.00000000007B0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
7B0000
|
| Size: |
36864
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174793717.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
A39000
|
unkown
|
page write copy
|
|
|
|
| Name: |
00000003.00000000.2214388564.0000000000A39000.00000008.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page write copy
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845508084.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
3B4E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402000910.0000000003B4E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3B4E000
|
| Size: |
8192
|
|
|
CEA000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000003.00000002.2263472516.0000000000CEA000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CEA000
|
| Size: |
1716224
|
|
|
46EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206530792.00000000046EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
46EF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160870311.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
478F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402587965.000000000478F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
478F000
|
| Size: |
4096
|
|
|
86F000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.000000000086F000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
86F000
|
| Size: |
24576
|
|
|
2DDF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267466465.0000000002DDF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2DDF000
|
| Size: |
4096
|
|
|
3FAE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206305433.0000000003FAE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3FAE000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160066938.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164580000.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
6AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262753312.00000000006AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
6AE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823425106.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
7DD000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399427588.00000000007DD000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
7DD000
|
| Size: |
12288
|
|
|
374F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401735352.000000000374F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
374F000
|
| Size: |
4096
|
|
|
A32000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000002.00000000.2181129551.0000000000A32000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
A32000
|
| Size: |
16384
|
|
|
12E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2821343508.00000000012E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12E0000
|
| Size: |
53248
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188622221.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
3BD000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262358000.00000000003BD000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BD000
|
| Size: |
12288
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164890496.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160354691.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4720000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206613094.0000000004720000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4720000
|
| Size: |
110592
|
|
|
48CF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402688550.00000000048CF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
48CF000
|
| Size: |
4096
|
|
|
F9F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2266661526.0000000000F9F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
F9F000
|
| Size: |
4096
|
|
|
56AF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403489632.00000000056AF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
56AF000
|
| Size: |
4096
|
|
|
133B000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.000000000133B000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
133B000
|
| Size: |
221184
|
|
|
397E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237290525.000000000397E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
397E000
|
| Size: |
8192
|
|
|
29C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221910674.00000000029C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
29C0000
|
| Size: |
53248
|
|
|
4D50000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206831864.0000000004D50000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D50000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160922801.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163264263.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4727000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175839992.0000000004727000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4727000
|
| Size: |
4096
|
|
|
2BC000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262227928.00000000002BC000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2BC000
|
| Size: |
16384
|
|
|
530E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403387608.000000000530E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
530E000
|
| Size: |
8192
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819248938.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821652056.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819343558.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
9D1000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000003.00000000.2214316574.00000000009D1000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
9D1000
|
| Size: |
393216
|
|
|
41DF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268270401.00000000041DF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
41DF000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219304825.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
13C0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236735582.00000000013C0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C0000
|
| Size: |
16384
|
|
|
4CC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158546381.0000000004CC0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CC0000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820509061.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
5360000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2237977538.0000000005360000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5360000
|
| Size: |
4096
|
|
|
8EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199563905.00000000008EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
8EE000
|
| Size: |
8192
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158404523.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
8192
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186791744.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
7DF000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.00000000007DF000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
7DF000
|
| Size: |
86016
|
|
|
3F5F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268190195.0000000003F5F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3F5F000
|
| Size: |
4096
|
|
|
9D0000
|
unkown
|
page readonly
|
|
|
|
| Name: |
00000002.00000000.2181092791.00000000009D0000.00000002.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page readonly
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
30CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236981191.00000000030CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
30CE000
|
| Size: |
8192
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2231053926.0000000000A39000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852950497.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4D20000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206769647.0000000004D20000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D20000
|
| Size: |
4096
|
|
|
3E5E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268166349.0000000003E5E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E5E000
|
| Size: |
8192
|
|
|
2DEF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202582100.0000000002DEF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2DEF000
|
| Size: |
4096
|
|
|
433F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237599651.000000000433F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
433F000
|
| Size: |
4096
|
|
|
2BDF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267383070.0000000002BDF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2BDF000
|
| Size: |
4096
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2263041403.0000000000A39000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851964314.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
3F6F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206286649.0000000003F6F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3F6F000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160575895.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
3DCE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402156249.0000000003DCE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3DCE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851829370.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
CE9000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000002.00000000.2181251818.0000000000CE9000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CE9000
|
| Size: |
1736704
|
|
|
5380000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238015813.0000000005380000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5380000
|
| Size: |
4096
|
|
|
36AF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205897778.00000000036AF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
36AF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162974731.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188158280.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
34CF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401602254.00000000034CF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
34CF000
|
| Size: |
4096
|
|
|
400F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402266868.000000000400F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
400F000
|
| Size: |
4096
|
|
|
431F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268383852.000000000431F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
431F000
|
| Size: |
4096
|
|
|
620000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262691450.0000000000620000.00000004.00000020.00040000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
620000
|
| Size: |
4096
|
|
|
BC1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000BC1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
BC1000
|
| Size: |
892928
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
|
4E8C000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403066683.0000000004E8C000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4E8C000
|
| Size: |
16384
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852285413.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
FDE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400502723.0000000000FDE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
FDE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851909233.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
5020000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403203526.0000000005020000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5020000
|
| Size: |
4096
|
|
|
2DCF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401094564.0000000002DCF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2DCF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823071696.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161143399.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
5370000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2237996832.0000000005370000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5370000
|
| Size: |
4096
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821633021.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
4096
|
|
|
308F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236953737.000000000308F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
308F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852315483.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4AFE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237832176.0000000004AFE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4AFE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852621172.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
5310000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189616267.0000000005310000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5310000
|
| Size: |
4096
|
|
|
381E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267907095.000000000381E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
381E000
|
| Size: |
8192
|
|
|
3F0E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402242117.0000000003F0E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3F0E000
|
| Size: |
8192
|
|
|
BC1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000BC1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
BC1000
|
| Size: |
892928
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823042846.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161326652.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
450F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402461612.000000000450F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
450F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851794189.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
E8D000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2236528817.0000000000E8D000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E8D000
|
| Size: |
8192
|
|
|
40DE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268249424.00000000040DE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
40DE000
|
| Size: |
8192
|
|
|
FE0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400540258.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
FE0000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820851454.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164418932.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
314E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237020006.000000000314E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
314E000
|
| Size: |
8192
|
|
|
31DE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267648152.00000000031DE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
31DE000
|
| Size: |
8192
|
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219449572.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
45A1000
|
| Size: |
229376
|
|
|
1103000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.0000000001103000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
1103000
|
| Size: |
20480
|
|
|
41EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206362188.00000000041EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
41EF000
|
| Size: |
4096
|
|
|
E69000
|
unkown
|
page write copy
|
|
|
|
| Name: |
00000000.00000000.2150479781.0000000000E69000.00000008.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page write copy
|
| Base address: |
E69000
|
| Size: |
4096
|
|
|
409F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268229012.000000000409F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
409F000
|
| Size: |
4096
|
|
|
4710000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175839992.0000000004710000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4710000
|
| Size: |
8192
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188265882.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2841324414.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
17EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236929609.00000000017EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
17EF000
|
| Size: |
4096
|
|
|
3170000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237059389.0000000003170000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
3170000
|
| Size: |
16384
|
|
|
DE0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2158076214.0000000000DE0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
DE0000
|
| Size: |
53248
|
|
|
355F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267767410.000000000355F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
355F000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156992430.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852978419.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
646F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207264320.000000000646F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
646F000
|
| Size: |
4096
|
|
|
1119000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000000.00000000.2150499987.0000000001119000.00000080.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
1119000
|
| Size: |
1736704
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161094405.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
AFE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199617340.0000000000AFE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
AFE000
|
| Size: |
8192
|
|
|
4F14000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206991414.0000000004F14000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4F14000
|
| Size: |
12288
|
|
|
6630000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207369485.0000000006630000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6630000
|
| Size: |
12288
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188044318.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
A3B000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000A3B000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A3B000
|
| Size: |
1585152
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165476794.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187633173.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819611449.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
4A14000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402800424.0000000004A14000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A14000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161302495.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160099925.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4B10000
|
trusted library allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2818964685.0000000004B10000.00000004.00000800.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
trusted library allocation
|
| Protect: |
page read and write
|
| Base address: |
4B10000
|
| Size: |
147456
|
|
|
4CB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158575726.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CB0000
|
| Size: |
4096
|
|
|
14FE000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236780888.00000000014FE000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
14FE000
|
| Size: |
135168
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222416199.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221389358.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
56EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403507437.00000000056EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
56EE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852251319.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4D30000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206791689.0000000004D30000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D30000
|
| Size: |
4096
|
|
|
2AEF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202491773.0000000002AEF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2AEF000
|
| Size: |
4096
|
|
|
1320000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821711913.0000000001320000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
1320000
|
| Size: |
4096
|
|
|
CD3000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000CD3000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CD3000
|
| Size: |
20480
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852013463.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
319F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267623608.000000000319F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
319F000
|
| Size: |
4096
|
|
|
5390000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238033836.0000000005390000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5390000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160225324.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222434752.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
4096
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222450108.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
4096
|
|
|
728000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262805951.0000000000728000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
728000
|
| Size: |
139264
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162788282.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220244242.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
369F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267810970.000000000369F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
369F000
|
| Size: |
4096
|
|
|
53B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238074399.00000000053B0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
53B0000
|
| Size: |
4096
|
|
|
E8D000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3400330701.0000000000E8D000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E8D000
|
| Size: |
8192
|
|
|
4C20000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268730070.0000000004C20000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4C20000
|
| Size: |
4096
|
|
|
3ABE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237330756.0000000003ABE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3ABE000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161381651.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221339043.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221133699.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
3AAE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206143977.0000000003AAE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3AAE000
|
| Size: |
8192
|
|
|
47F0000
|
trusted library allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2155899790.00000000047F0000.00000004.00000800.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
trusted library allocation
|
| Protect: |
page read and write
|
| Base address: |
47F0000
|
| Size: |
167936
|
|
|
1520000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236780888.0000000001520000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
1520000
|
| Size: |
12288
|
|
|
356F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205775474.000000000356F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
356F000
|
| Size: |
4096
|
|
|
359E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267789120.000000000359E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
359E000
|
| Size: |
8192
|
|
|
45EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206511651.00000000045EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
45EE000
|
| Size: |
8192
|
|
|
4724000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175839992.0000000004724000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4724000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156060406.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
51FE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237925047.00000000051FE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
51FE000
|
| Size: |
8192
|
|
|
5050000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403257533.0000000005050000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5050000
|
| Size: |
4096
|
|
|
4FD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821728787.0000000004FD0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FD0000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161047480.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
92E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262851416.000000000092E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
92E000
|
| Size: |
8192
|
|
|
A32000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000003.00000000.2214316574.0000000000A32000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
A32000
|
| Size: |
16384
|
|
|
3A7F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237310839.0000000003A7F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3A7F000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2190904939.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160262168.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852830282.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852686661.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4A5E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268529884.0000000004A5E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4A5E000
|
| Size: |
8192
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222306463.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823681989.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
345E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267747984.000000000345E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
345E000
|
| Size: |
8192
|
|
|
2F2F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2203027790.0000000002F2F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2F2F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851873656.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852374825.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
306F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2203566939.000000000306F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
306F000
|
| Size: |
4096
|
|
|
3F7F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237480335.0000000003F7F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3F7F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170250860.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160652881.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189506186.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
4096
|
|
|
3E3F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237441818.0000000003E3F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E3F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163146123.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
3E7E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237460878.0000000003E7E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E7E000
|
| Size: |
8192
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221408564.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823808486.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
45FE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237688002.00000000045FE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
45FE000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160391045.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163701685.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852802735.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
9D0000
|
unkown
|
page readonly
|
|
|
|
| Name: |
00000003.00000000.2214269090.00000000009D0000.00000002.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page readonly
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
464F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402523250.000000000464F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
464F000
|
| Size: |
4096
|
|
|
12E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2821232948.00000000012E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12E0000
|
| Size: |
53248
|
|
|
53C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238092449.00000000053C0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
53C0000
|
| Size: |
4096
|
|
|
3160000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2189132322.0000000003160000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
3160000
|
| Size: |
53248
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187913894.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164015976.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4F10000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206991414.0000000004F10000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4F10000
|
| Size: |
8192
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156249568.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
3E1F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268135448.0000000003E1F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E1F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162294874.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
111A000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000000.00000002.2202147391.000000000111A000.00000080.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
111A000
|
| Size: |
1716224
|
|
|
CEA000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000002.00000002.2235576670.0000000000CEA000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CEA000
|
| Size: |
1716224
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164346382.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
CDA000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000CDA000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CDA000
|
| Size: |
40960
|
|
|
9D1000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000002.00000000.2181129551.00000000009D1000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
9D1000
|
| Size: |
393216
|
|
|
3BBF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237352480.0000000003BBF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BBF000
|
| Size: |
4096
|
|
|
FF1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.0000000000FF1000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
FF1000
|
| Size: |
892928
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165763502.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
300E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401202010.000000000300E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
300E000
|
| Size: |
8192
|
|
|
40FE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237542951.00000000040FE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
40FE000
|
| Size: |
8192
|
|
|
80E000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.000000000080E000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
80E000
|
| Size: |
253952
|
|
|
16EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236875468.00000000016EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
16EF000
|
| Size: |
4096
|
|
|
4CD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158560483.0000000004CD0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CD0000
|
| Size: |
4096
|
|
|
6A60000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207526818.0000000006A60000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6A60000
|
| Size: |
126976
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852774562.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
41FF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237562515.00000000041FF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
41FF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852460569.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
840000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399473075.0000000000840000.00000004.00000020.00040000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
840000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823731809.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845456854.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
428F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402381018.000000000428F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
428F000
|
| Size: |
4096
|
|
|
6DC000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399397041.00000000006DC000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
6DC000
|
| Size: |
16384
|
|
|
82C0000
|
trusted library allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207609091.00000000082C0000.00000004.00000800.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
trusted library allocation
|
| Protect: |
page read and write
|
| Base address: |
82C0000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2853034360.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156160168.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
446F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206451926.000000000446F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
446F000
|
| Size: |
4096
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158486089.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
4096
|
|
|
632F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207221303.000000000632F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
632F000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820710092.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187155071.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
710000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262790364.0000000000710000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
710000
|
| Size: |
4096
|
|
|
395E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267963553.000000000395E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
395E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852116257.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174740531.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157678364.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
900000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199582009.0000000000900000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
900000
|
| Size: |
4096
|
|
|
2E1E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267496365.0000000002E1E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2E1E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160996393.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157750170.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2159876842.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
49152
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160895036.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
4A10000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402800424.0000000004A10000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A10000
|
| Size: |
4096
|
|
|
3B9F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268028366.0000000003B9F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3B9F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164775767.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220142767.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821689016.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
4096
|
|
|
2ADF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267316473.0000000002ADF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2ADF000
|
| Size: |
4096
|
|
|
13AA000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.00000000013AA000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13AA000
|
| Size: |
53248
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
|
660000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262732163.0000000000660000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
660000
|
| Size: |
16384
|
|
|
299E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202358889.000000000299E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
299E000
|
| Size: |
8192
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222208894.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
8192
|
|
|
342F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205564051.000000000342F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
342F000
|
| Size: |
4096
|
|
|
9D1000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000006.00000000.2814256077.00000000009D1000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
9D1000
|
| Size: |
393216
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852167976.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262898727.00000000009D0000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
46FF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237706842.00000000046FF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
46FF000
|
| Size: |
4096
|
|
|
3160000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237040305.0000000003160000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
3160000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845929837.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
440E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402442510.000000000440E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
440E000
|
| Size: |
8192
|
|
|
4C30000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268749230.0000000004C30000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4C30000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160823860.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
29D0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267229285.00000000029D0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
29D0000
|
| Size: |
16384
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174578506.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186937993.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
E62000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000000.00000000.2150418830.0000000000E62000.00000080.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
E62000
|
| Size: |
16384
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2841997924.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160208141.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
44BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237652304.00000000044BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
44BE000
|
| Size: |
8192
|
|
|
35AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205809786.00000000035AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
35AE000
|
| Size: |
8192
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821612146.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
4096
|
|
|
C3E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199693761.0000000000C3E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
C3E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165061604.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
57ED000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403526182.00000000057ED000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
57ED000
|
| Size: |
12288
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219623365.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845868048.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
133E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236677176.000000000133E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
133E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175275508.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
364E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401708565.000000000364E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
364E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164845111.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170677751.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
5070000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403291970.0000000005070000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5070000
|
| Size: |
4096
|
|
|
E69000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2200609497.0000000000E69000.00000004.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
E69000
|
| Size: |
4096
|
|
|
328E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401332877.000000000328E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
328E000
|
| Size: |
8192
|
|
|
421E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268290383.000000000421E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
421E000
|
| Size: |
8192
|
|
|
4BC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268598085.0000000004BC0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BC0000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157234103.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2159930668.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
6490000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207282023.0000000006490000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6490000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820610649.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164118929.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845987980.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
E8F000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000002.00000002.2236547771.0000000000E8F000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
E8F000
|
| Size: |
8192
|
|
|
540F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403407038.000000000540F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
540F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163446886.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4D10000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206749288.0000000004D10000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D10000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161119222.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
3D8F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402105221.0000000003D8F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3D8F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170281523.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
36FE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237212774.00000000036FE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
36FE000
|
| Size: |
8192
|
|
|
6637000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207369485.0000000006637000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6637000
|
| Size: |
16384
|
|
|
447F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237635742.000000000447F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
447F000
|
| Size: |
4096
|
|
|
6634000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207369485.0000000006634000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6634000
|
| Size: |
8192
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186958363.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
5060000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403274211.0000000005060000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5060000
|
| Size: |
4096
|
|
|
554F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403449992.000000000554F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
554F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852488319.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164500594.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
2CEF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202525275.0000000002CEF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2CEF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162900842.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2171316902.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163009066.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852343730.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
6500000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207304699.0000000006500000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6500000
|
| Size: |
8192
|
|
|
865000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.0000000000865000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
865000
|
| Size: |
8192
|
|
|
51CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403349318.00000000051CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
51CE000
|
| Size: |
8192
|
|
|
3C4F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402043743.0000000003C4F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3C4F000
|
| Size: |
4096
|
|
|
7BA000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.00000000007BA000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
7BA000
|
| Size: |
8192
|
|
|
418E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402360180.000000000418E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
418E000
|
| Size: |
8192
|
|
|
4D00000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206725315.0000000004D00000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D00000
|
| Size: |
4096
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399678150.00000000009D0000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
6120000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207160560.0000000006120000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6120000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160245030.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823342391.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156075947.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219562738.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
800000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.0000000000800000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
800000
|
| Size: |
45056
|
|
|
123E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400561132.000000000123E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
123E000
|
| Size: |
8192
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157339868.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
350E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401631041.000000000350E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
350E000
|
| Size: |
8192
|
|
|
314E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401285672.000000000314E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
314E000
|
| Size: |
8192
|
|
|
483F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237743215.000000000483F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
483F000
|
| Size: |
4096
|
|
|
29E0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202393218.00000000029E0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
29E0000
|
| Size: |
20480
|
|
|
CE9000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000006.00000000.2814327436.0000000000CE9000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CE9000
|
| Size: |
1736704
|
|
|
4D80000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206895534.0000000004D80000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D80000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819437059.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
45AF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206492026.00000000045AF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
45AF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845897880.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
582E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403546275.000000000582E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
582E000
|
| Size: |
8192
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158466587.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
4096
|
|
|
9AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262884117.00000000009AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
9AE000
|
| Size: |
8192
|
|
|
A32000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399736911.0000000000A32000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A32000
|
| Size: |
20480
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821577904.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
8192
|
|
|
29C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267199206.00000000029C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
29C0000
|
| Size: |
4096
|
|
|
13BF000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.00000000013BF000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13BF000
|
| Size: |
4096
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| URLs found in memory or binary data |
Networking |
|
|
|
3177000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237059389.0000000003177000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
3177000
|
| Size: |
12288
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820403271.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157118063.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819526173.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
347F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237141666.000000000347F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
347F000
|
| Size: |
4096
|
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222243581.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BA0000
|
| Size: |
4096
|
|
|
1378000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.0000000001378000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
1378000
|
| Size: |
73728
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
| URLs found in memory or binary data |
Networking |
|
|
|
127B000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400580064.000000000127B000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
127B000
|
| Size: |
20480
|
|
|
39CF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401892956.00000000039CF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
39CF000
|
| Size: |
4096
|
|
|
4D70000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206873732.0000000004D70000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D70000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219960922.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
55AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403469405.00000000055AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
55AE000
|
| Size: |
8192
|
|
|
422E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206382744.000000000422E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
422E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823779355.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
2F5E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267550492.0000000002F5E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2F5E000
|
| Size: |
8192
|
|
|
2FCF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401173361.0000000002FCF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2FCF000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819783697.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
468E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402564042.000000000468E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
468E000
|
| Size: |
8192
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819960481.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
5080000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403310609.0000000005080000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5080000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157647450.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
49152
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160735810.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160084468.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
31EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2204762698.00000000031EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
31EE000
|
| Size: |
8192
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156610390.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
96E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262868217.000000000096E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
96E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164191242.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
760000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198413785.0000000000760000.00000004.00000020.00040000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
760000
|
| Size: |
4096
|
|
|
E8D000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2266201482.0000000000E8D000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E8D000
|
| Size: |
8192
|
|
|
4F0C000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206963803.0000000004F0C000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4F0C000
|
| Size: |
16384
|
|
|
12FD000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236656775.00000000012FD000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
12FD000
|
| Size: |
12288
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220656545.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820794604.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
49152
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852716022.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
13BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236716194.00000000013BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
13BE000
|
| Size: |
8192
|
|
|
608E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207083956.000000000608E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
608E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852223828.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
32DF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267671949.00000000032DF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
32DF000
|
| Size: |
4096
|
|
|
29E7000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202393218.00000000029E7000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
29E7000
|
| Size: |
32768
|
|
|
1330000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.0000000001330000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
1330000
|
| Size: |
36864
|
|
|
7F5000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.00000000007F5000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
7F5000
|
| Size: |
20480
|
|
|
3BEE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206185732.0000000003BEE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BEE000
|
| Size: |
8192
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187543006.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
37EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206008423.00000000037EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
37EF000
|
| Size: |
4096
|
|
|
3B0F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401950768.0000000003B0F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3B0F000
|
| Size: |
4096
|
|
|
4C40000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268768493.0000000004C40000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4C40000
|
| Size: |
4096
|
|
|
F9F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400381490.0000000000F9F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
F9F000
|
| Size: |
4096
|
|
|
A39000
|
unkown
|
page write copy
|
|
|
|
| Name: |
00000006.00000000.2814310865.0000000000A39000.00000008.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page write copy
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
360F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401685403.000000000360F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
360F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2842485452.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
6125000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207160560.0000000006125000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6125000
|
| Size: |
8192
|
|
|
940000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399492812.0000000000940000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
940000
|
| Size: |
4096
|
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268574565.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BB0000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163652151.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4D41000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186679699.0000000004D41000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4D41000
|
| Size: |
229376
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2155836906.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
65536
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851727213.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
F2C000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236569005.0000000000F2C000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
F2C000
|
| Size: |
16384
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2159960303.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
49BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237795339.00000000049BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
49BE000
|
| Size: |
8192
|
|
|
4700000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206548113.0000000004700000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4700000
|
| Size: |
4096
|
|
|
88A000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.000000000088A000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
88A000
|
| Size: |
151552
|
|
|
720000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262805951.0000000000720000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
720000
|
| Size: |
24576
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852402179.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
5320000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189548031.0000000005320000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5320000
|
| Size: |
4096
|
|
|
43CF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402420746.00000000043CF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
43CF000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189483760.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
4096
|
|
|
87B000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2168556673.000000000087B000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
87B000
|
| Size: |
86016
|
|
|
31AF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2204503591.00000000031AF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
31AF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160847101.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
396E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206069711.000000000396E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
396E000
|
| Size: |
8192
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187248309.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170912553.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
3BFE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237373886.0000000003BFE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BFE000
|
| Size: |
8192
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156703984.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219660200.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4716000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175839992.0000000004716000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4716000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845961655.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
383E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237253879.000000000383E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
383E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161021550.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
544E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403428908.000000000544E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
544E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163322603.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163373782.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189366734.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852195132.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161247999.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165362746.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
42CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402401706.00000000042CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
42CE000
|
| Size: |
8192
|
|
|
CD3000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000CD3000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CD3000
|
| Size: |
20480
|
|
|
3F9E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268210115.0000000003F9E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3F9E000
|
| Size: |
8192
|
|
|
E6B000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.0000000000E6B000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E6B000
|
| Size: |
1585152
|
|
|
3D3E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237412802.0000000003D3E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3D3E000
|
| Size: |
8192
|
|
|
5030000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403221519.0000000005030000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5030000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160608015.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
29C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221765755.00000000029C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
29C0000
|
| Size: |
53248
|
|
|
4BE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268636249.0000000004BE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BE0000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221372101.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2853007345.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
F90000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236595632.0000000000F90000.00000004.00000020.00040000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
F90000
|
| Size: |
4096
|
|
|
46A0000
|
trusted library allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219348911.00000000046A0000.00000004.00000800.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
trusted library allocation
|
| Protect: |
page read and write
|
| Base address: |
46A0000
|
| Size: |
167936
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2841938342.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161271525.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
414F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402323663.000000000414F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
414F000
|
| Size: |
4096
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188379894.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
892000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2168890880.0000000000892000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
892000
|
| Size: |
36864
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852919980.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
3D2E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206227075.0000000003D2E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3D2E000
|
| Size: |
8192
|
|
|
3E2E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206247351.0000000003E2E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3E2E000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160188666.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
3FB000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198331642.00000000003FB000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3FB000
|
| Size: |
20480
|
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221309800.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
45A1000
|
| Size: |
49152
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852090251.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
5350000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2237960024.0000000005350000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5350000
|
| Size: |
4096
|
|
|
14F0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236780888.00000000014F0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
14F0000
|
| Size: |
32768
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164082709.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170368215.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
29BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267170723.00000000029BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
29BE000
|
| Size: |
8192
|
|
|
2F1F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267528354.0000000002F1F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2F1F000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160047394.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823002677.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
49152
|
|
|
82BC000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207589481.00000000082BC000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
82BC000
|
| Size: |
16384
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187443527.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
84F000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.000000000084F000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
84F000
|
| Size: |
81920
|
|
|
110A000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.000000000110A000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
110A000
|
| Size: |
40960
|
|
|
5040000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403239124.0000000005040000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5040000
|
| Size: |
4096
|
|
|
40BF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237522205.00000000040BF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
40BF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852861688.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
449E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268455667.000000000449E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
449E000
|
| Size: |
8192
|
|
|
868000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.0000000000868000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
868000
|
| Size: |
8192
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220053515.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156029666.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823394544.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
950000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399512949.0000000000950000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
950000
|
| Size: |
16384
|
|
|
310F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401255973.000000000310F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
310F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161070804.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
770000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198437651.0000000000770000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
770000
|
| Size: |
8192
|
|
|
DE0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2158187646.0000000000DE0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
DE0000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852429151.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
44AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206469908.00000000044AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
44AE000
|
| Size: |
8192
|
|
|
4D41000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186487653.0000000004D41000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4D41000
|
| Size: |
65536
|
|
|
4D3F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237888900.0000000004D3F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4D3F000
|
| Size: |
4096
|
|
|
445F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268427356.000000000445F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
445F000
|
| Size: |
4096
|
|
|
4CB0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206685471.0000000004CB0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4CB0000
|
| Size: |
4096
|
|
|
32EF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205349137.00000000032EF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
32EF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164612471.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2223894529.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4C10000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268708576.0000000004C10000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4C10000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823631887.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160669528.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F2000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206548113.00000000046F2000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F2000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2842044303.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
138D000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400789012.000000000138D000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
138D000
|
| Size: |
114688
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| URLs found in memory or binary data |
Networking |
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160375777.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2155860647.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
3D1E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268113278.0000000003D1E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3D1E000
|
| Size: |
8192
|
|
|
C9F000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000C9F000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
C9F000
|
| Size: |
135168
|
|
|
E00000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2200008656.0000000000E00000.00000004.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
E00000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2190882404.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160506481.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162838674.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
BC1000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000BC1000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
BC1000
|
| Size: |
892928
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
|
404E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402301269.000000000404E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
404E000
|
| Size: |
8192
|
|
|
52CF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403368533.00000000052CF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
52CF000
|
| Size: |
4096
|
|
|
4ECB000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403096065.0000000004ECB000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4ECB000
|
| Size: |
20480
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158525661.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
4096
|
|
|
3BDE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268056012.0000000003BDE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BDE000
|
| Size: |
8192
|
|
|
636E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207244563.000000000636E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
636E000
|
| Size: |
8192
|
|
|
E8F000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000003.00000002.2266227288.0000000000E8F000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
E8F000
|
| Size: |
8192
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219639909.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170310441.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2155996323.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
229376
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187058078.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170837354.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164933501.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
64FE000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207304699.00000000064FE000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
64FE000
|
| Size: |
4096
|
|
|
37FF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237233708.00000000037FF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
37FF000
|
| Size: |
4096
|
|
|
5F8B000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207059975.0000000005F8B000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
5F8B000
|
| Size: |
20480
|
|
|
4B90000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222519518.0000000004B90000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4B90000
|
| Size: |
4096
|
|
|
2BEF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202508576.0000000002BEF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2BEF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852037891.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
9C0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399617712.00000000009C0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
9C0000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219542167.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
6FA000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198394779.00000000006FA000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
6FA000
|
| Size: |
24576
|
|
|
4BFF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237852215.0000000004BFF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4BFF000
|
| Size: |
4096
|
|
|
CD3000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000CD3000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CD3000
|
| Size: |
20480
|
|
|
53A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238054855.00000000053A0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
53A0000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219865558.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
137E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236698173.000000000137E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
137E000
|
| Size: |
8192
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219677213.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
3A5F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267985110.0000000003A5F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3A5F000
|
| Size: |
4096
|
|
|
432F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206406612.000000000432F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
432F000
|
| Size: |
4096
|
|
|
437E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237617271.000000000437E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
437E000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2159980045.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170342221.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
2ECF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401119869.0000000002ECF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2ECF000
|
| Size: |
4096
|
|
|
40EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206342534.00000000040EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
40EE000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160762795.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852142526.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
497F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237778227.000000000497F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
497F000
|
| Size: |
4096
|
|
|
3C8E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402078706.0000000003C8E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3C8E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170726851.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
36DE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267830918.00000000036DE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
36DE000
|
| Size: |
8192
|
|
|
CEA000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000006.00000002.3400137981.0000000000CEA000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CEA000
|
| Size: |
1716224
|
|
|
3A0E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401929074.0000000003A0E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3A0E000
|
| Size: |
8192
|
|
|
920000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199599405.0000000000920000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
920000
|
| Size: |
16384
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163848228.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189415445.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
4096
|
|
|
CE9000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000CE9000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CE9000
|
| Size: |
4096
|
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2223825638.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
45A1000
|
| Size: |
49152
|
|
|
CE9000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000CE9000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CE9000
|
| Size: |
4096
|
|
|
A32000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2262912878.0000000000A32000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A32000
|
| Size: |
20480
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164684914.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157730385.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819697512.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851988343.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157556731.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2819063813.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
200704
|
|
|
99E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399598169.000000000099E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
99E000
|
| Size: |
8192
|
|
|
A32000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2230041079.0000000000A32000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A32000
|
| Size: |
20480
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164156318.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189461917.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
4096
|
|
|
6EAC000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207564377.0000000006EAC000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
6EAC000
|
| Size: |
16384
|
|
|
435E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268406054.000000000435E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
435E000
|
| Size: |
8192
|
|
|
297E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267141093.000000000297E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
297E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823578773.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
337F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237123258.000000000337F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
337F000
|
| Size: |
4096
|
|
|
4BD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268619302.0000000004BD0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BD0000
|
| Size: |
4096
|
|
|
CE9000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000CE9000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CE9000
|
| Size: |
4096
|
|
|
14FA000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236780888.00000000014FA000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
14FA000
|
| Size: |
8192
|
|
|
3CEF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206207517.0000000003CEF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3CEF000
|
| Size: |
4096
|
|
|
12BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400599088.00000000012BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
12BE000
|
| Size: |
8192
|
|
|
36EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205954222.00000000036EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
36EE000
|
| Size: |
8192
|
|
|
CDA000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000CDA000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CDA000
|
| Size: |
40960
|
|
|
4ECB000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206942438.0000000004ECB000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4ECB000
|
| Size: |
20480
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186514468.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219772555.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
4D41000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2190839770.0000000004D41000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4D41000
|
| Size: |
49152
|
|
|
291E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202286735.000000000291E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
291E000
|
| Size: |
8192
|
|
|
E62000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200211244.0000000000E62000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
E62000
|
| Size: |
20480
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852650039.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
650000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262714982.0000000000650000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
650000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160946989.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
4D40000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206810319.0000000004D40000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D40000
|
| Size: |
4096
|
|
|
5340000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189523605.0000000005340000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5340000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170769598.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4D40000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237906767.0000000004D40000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4D40000
|
| Size: |
4096
|
|
|
30AE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2204100447.00000000030AE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
30AE000
|
| Size: |
8192
|
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821671158.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FE0000
|
| Size: |
4096
|
|
|
378E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401784789.000000000378E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
378E000
|
| Size: |
8192
|
|
|
4A20000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402800424.0000000004A20000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A20000
|
| Size: |
36864
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399799060.0000000000A39000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
392F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206051766.000000000392F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
392F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174930174.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
891000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2168556673.0000000000891000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
891000
|
| Size: |
40960
|
|
|
4C00000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268685593.0000000004C00000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4C00000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220545577.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160154122.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
295C000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202341443.000000000295C000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
295C000
|
| Size: |
16384
|
|
|
3CDE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268086997.0000000003CDE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3CDE000
|
| Size: |
8192
|
|
|
4FCF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403124139.0000000004FCF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4FCF000
|
| Size: |
4096
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220884553.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
388F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401821248.000000000388F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
388F000
|
| Size: |
4096
|
|
|
38CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401842154.00000000038CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
38CE000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160293910.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820230069.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
52FF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237942639.00000000052FF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
52FF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163033412.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2840941828.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164645068.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
4BF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2268655084.0000000004BF0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4BF0000
|
| Size: |
4096
|
|
|
109F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2266698872.000000000109F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
109F000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852578187.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
592D000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403566133.000000000592D000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
592D000
|
| Size: |
12288
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162866998.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163935594.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
423E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237580583.000000000423E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
423E000
|
| Size: |
8192
|
|
|
33CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401498306.00000000033CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
33CE000
|
| Size: |
8192
|
|
|
4C3E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237870645.0000000004C3E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4C3E000
|
| Size: |
8192
|
|
|
4B5F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268550917.0000000004B5F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4B5F000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188659240.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
87B000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165565762.000000000087B000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
87B000
|
| Size: |
61440
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156871382.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188639282.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
FF0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236638718.0000000000FF0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
FF0000
|
| Size: |
4096
|
|
|
4CAF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206667684.0000000004CAF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4CAF000
|
| Size: |
4096
|
|
|
1119000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.0000000001119000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
1119000
|
| Size: |
4096
|
|
|
305F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267574138.000000000305F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
305F000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156045815.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156426970.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
CDA000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000CDA000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
CDA000
|
| Size: |
40960
|
|
|
12C0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820071219.00000000012C0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12C0000
|
| Size: |
53248
|
|
|
518B000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3403329933.000000000518B000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
518B000
|
| Size: |
20480
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161225245.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
436E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206430821.000000000436E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
436E000
|
| Size: |
8192
|
|
|
C9F000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000C9F000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
C9F000
|
| Size: |
135168
|
|
|
1310000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000003.2821747113.0000000001310000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
1310000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157697473.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164222066.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
60CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207115797.00000000060CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
60CE000
|
| Size: |
8192
|
|
|
4ABF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237814467.0000000004ABF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4ABF000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2175801546.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187802024.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222504731.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4B80000
|
| Size: |
4096
|
|
|
357F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237159357.000000000357F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
357F000
|
| Size: |
4096
|
|
|
40AF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206324037.00000000040AF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
40AF000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823162139.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206548113.00000000046F0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F0000
|
| Size: |
4096
|
|
|
2E2E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202599003.0000000002E2E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2E2E000
|
| Size: |
8192
|
|
|
327F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237105255.000000000327F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
327F000
|
| Size: |
4096
|
|
|
3ECF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402206850.0000000003ECF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3ECF000
|
| Size: |
4096
|
|
|
FA0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236618747.0000000000FA0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
FA0000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160540876.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
45BF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237670260.00000000045BF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
45BF000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221357714.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
4BAE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206646153.0000000004BAE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4BAE000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163061068.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
DE0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199850321.0000000000DE0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
DE0000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188604273.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160524802.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
35BE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237176431.00000000035BE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
35BE000
|
| Size: |
8192
|
|
|
4FF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403142789.0000000004FF0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4FF0000
|
| Size: |
4096
|
|
|
A39000
|
unkown
|
page write copy
|
|
|
|
| Name: |
00000002.00000000.2181197721.0000000000A39000.00000008.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page write copy
|
| Base address: |
A39000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852745574.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
4E40000
|
trusted library allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186557549.0000000004E40000.00000004.00000800.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
trusted library allocation
|
| Protect: |
page read and write
|
| Base address: |
4E40000
|
| Size: |
167936
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160593260.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
487E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237760148.000000000487E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
487E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163981829.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186917029.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
501F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207039898.000000000501F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
501F000
|
| Size: |
4096
|
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403184674.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5010000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186746495.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165396642.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4DC8000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206921901.0000000004DC8000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4DC8000
|
| Size: |
32768
|
|
|
331E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267693213.000000000331E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
331E000
|
| Size: |
8192
|
|
|
14DE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2236760127.00000000014DE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
14DE000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160970562.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
8192
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220777903.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
622F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207202919.000000000622F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
622F000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160623042.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823316423.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2187347133.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
459F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268480970.000000000459F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
459F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163543410.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2174698324.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2219519105.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2170874431.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
12BF000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000000.00000002.2202270039.00000000012BF000.00000080.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
12BF000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161201150.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
29DE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2202376673.00000000029DE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
29DE000
|
| Size: |
8192
|
|
|
332E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205542334.000000000332E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
332E000
|
| Size: |
8192
|
|
|
310E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237002216.000000000310E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
310E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2842134232.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
B3E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2199672839.0000000000B3E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
B3E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2823272803.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
7BE000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.00000000007BE000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
7BE000
|
| Size: |
131072
|
|
|
3A6F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206096032.0000000003A6F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3A6F000
|
| Size: |
4096
|
|
|
676E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207440957.000000000676E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
676E000
|
| Size: |
8192
|
|
|
955000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3399512949.0000000000955000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
955000
|
| Size: |
8192
|
|
|
12BD000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2202251981.00000000012BD000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
12BD000
|
| Size: |
8192
|
|
|
6EE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2262771246.00000000006EE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
6EE000
|
| Size: |
8192
|
|
|
14E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188486936.00000000014E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
14E0000
|
| Size: |
53248
|
|
|
12F7000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400637947.00000000012F7000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
12F7000
|
| Size: |
12288
|
|
|
346E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2205640259.000000000346E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
346E000
|
| Size: |
8192
|
|
|
382E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206029147.000000000382E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
382E000
|
| Size: |
8192
|
|
|
47CE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402638254.00000000047CE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
47CE000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851758351.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163734359.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160683545.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186767560.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
E01000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000000.00000000.2150418830.0000000000E01000.00000080.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
E01000
|
| Size: |
393216
|
|
|
391F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267939516.000000000391F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
391F000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188679073.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160700752.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
686E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207464269.000000000686E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
686E000
|
| Size: |
8192
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852063074.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2159905525.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
3A9E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268007177.0000000003A9E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3A9E000
|
| Size: |
8192
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157454193.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
A32000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000006.00000000.2814256077.0000000000A32000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
A32000
|
| Size: |
16384
|
|
|
45A0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2268507391.00000000045A0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
45A0000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160016329.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2820885631.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
53D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2238110381.00000000053D0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
53D0000
|
| Size: |
4096
|
|
|
4D60000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206851074.0000000004D60000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4D60000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162116824.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163900093.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161868722.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A0F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402749319.0000000004A0F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
4A0F000
|
| Size: |
4096
|
|
|
293F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2266724855.000000000293F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
293F000
|
| Size: |
4096
|
|
|
4CF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2206706279.0000000004CF0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CF0000
|
| Size: |
4096
|
|
|
876000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2198453542.0000000000876000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
876000
|
| Size: |
77824
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158441015.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162750248.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2163511550.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
36BF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237195313.00000000036BF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
36BF000
|
| Size: |
4096
|
|
|
2F6E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2203127148.0000000002F6E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2F6E000
|
| Size: |
8192
|
|
|
29D7000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267229285.00000000029D7000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
29D7000
|
| Size: |
8192
|
|
|
37DF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267876904.00000000037DF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
37DF000
|
| Size: |
4096
|
|
|
2CDF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267415846.0000000002CDF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2CDF000
|
| Size: |
4096
|
|
|
68AB000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207483975.00000000068AB000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
68AB000
|
| Size: |
20480
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165434043.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4A30000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402800424.0000000004A30000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A30000
|
| Size: |
65536
|
|
|
309E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000003.00000002.2267596540.000000000309E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
309E000
|
| Size: |
8192
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160559424.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
E00000
|
unkown
|
page readonly
|
|
|
|
| Name: |
00000000.00000000.2150397825.0000000000E00000.00000002.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page readonly
|
| Base address: |
E00000
|
| Size: |
4096
|
|
|
12FD000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400637947.00000000012FD000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
12FD000
|
| Size: |
4096
|
|
|
4D41000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2188573399.0000000004D41000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4D41000
|
| Size: |
49152
|
|
|
5000000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3403163253.0000000005000000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5000000
|
| Size: |
4096
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2157713145.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
12F0000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400637947.00000000012F0000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
12F0000
|
| Size: |
16384
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2845405726.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
867000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165602146.0000000000867000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
867000
|
| Size: |
81920
|
|
|
924000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160637951.0000000000924000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
924000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161358523.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2160797395.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
4CE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000003.2158510930.0000000004CE0000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4CE0000
|
| Size: |
4096
|
|
|
3BAF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2206167491.0000000003BAF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3BAF000
|
| Size: |
4096
|
|
|
A3B000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000002.2231225967.0000000000A3B000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A3B000
|
| Size: |
1585152
|
|
|
CE9000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000003.00000000.2214411763.0000000000CE9000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
CE9000
|
| Size: |
1736704
|
|
|
454E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402482361.000000000454E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
454E000
|
| Size: |
8192
|
|
|
5330000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000002.00000003.2189596103.0000000005330000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
5330000
|
| Size: |
4096
|
|
|
13C4000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2186719602.00000000013C4000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
13C4000
|
| Size: |
4096
|
|
|
664000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2223919507.0000000000664000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
664000
|
| Size: |
4096
|
|
|
393F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237272411.000000000393F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
393F000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164302402.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156516952.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2220375971.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2851937626.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2161167485.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2162949616.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
C9F000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000006.00000002.3399818041.0000000000C9F000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
C9F000
|
| Size: |
135168
|
|
|
4B70000
|
direct allocation
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000003.2222575130.0000000004B70000.00000040.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page execute and read and write
|
| Base address: |
4B70000
|
| Size: |
4096
|
|
|
E8F000
|
unkown
|
page execute and write copy
|
|
|
|
| Name: |
00000006.00000002.3400354860.0000000000E8F000.00000080.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and write copy
|
| Base address: |
E8F000
|
| Size: |
8192
|
|
|
891000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2165565762.0000000000891000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
891000
|
| Size: |
4096
|
|
|
324F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401307787.000000000324F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
324F000
|
| Size: |
4096
|
|
|
2CCF000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401072148.0000000002CCF000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
2CCF000
|
| Size: |
4096
|
|
|
473E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237725771.000000000473E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
473E000
|
| Size: |
8192
|
|
|
610E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207142834.000000000610E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
610E000
|
| Size: |
8192
|
|
|
9D0000
|
unkown
|
page readonly
|
|
|
|
| Name: |
00000006.00000000.2814234349.00000000009D0000.00000002.00000001.01000000.00000008.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process new
|
| Regiontype: |
unkown
|
| Protect: |
page readonly
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
490E000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3402725846.000000000490E000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
490E000
|
| Size: |
8192
|
|
|
46F1000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2164382810.00000000046F1000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
46F1000
|
| Size: |
4096
|
|
|
10CF000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000000.00000002.2200630132.00000000010CF000.00000040.00000001.01000000.00000003.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
10CF000
|
| Size: |
135168
|
|
|
3160000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000002.00000003.2189025059.0000000003160000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
3160000
|
| Size: |
53248
|
|
|
A3B000
|
unkown
|
page execute and read and write
|
|
|
|
| Name: |
00000003.00000002.2263056068.0000000000A3B000.00000040.00000001.01000000.00000008.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page execute and read and write
|
| Base address: |
A3B000
|
| Size: |
1585152
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221234297.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
910000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2156340205.0000000000910000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
910000
|
| Size: |
53248
|
|
|
9B0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000003.00000003.2221026726.00000000009B0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
3
|
| Dumpstage: |
free memory
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
9B0000
|
| Size: |
53248
|
|
|
338F000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3401435254.000000000338F000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
338F000
|
| Size: |
4096
|
|
|
3FBE000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2237500365.0000000003FBE000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
3FBE000
|
| Size: |
8192
|
|
|
6A6B000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000000.00000003.2177231472.0000000006A6B000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
6A6B000
|
| Size: |
524288
|
|
|
12E0000
|
direct allocation
|
page read and write
|
|
|
|
| Name: |
00000006.00000002.3400620328.00000000012E0000.00000004.00001000.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
process exit
|
| Regiontype: |
direct allocation
|
| Protect: |
page read and write
|
| Base address: |
12E0000
|
| Size: |
4096
|
|
|
4A11000
|
heap
|
page read and write
|
|
|
|
| Name: |
00000006.00000003.2852890576.0000000004A11000.00000004.00000020.00020000.00000000.sdmp
|
| TargetID: |
6
|
| Dumpstage: |
free memory
|
| Regiontype: |
heap
|
| Protect: |
page read and write
|
| Base address: |
4A11000
|
| Size: |
4096
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
| Name: |
00000002.00000002.2230003945.00000000009D0000.00000004.00000001.01000000.00000008.sdmp
|
| TargetID: |
2
|
| Dumpstage: |
process exit
|
| Regiontype: |
unkown
|
| Protect: |
page read and write
|
| Base address: |
9D0000
|
| Size: |
4096
|
|
|
697C000
|
stack
|
page read and write
|
|
|
|
| Name: |
00000000.00000002.2207502599.000000000697C000.00000004.00000010.00020000.00000000.sdmp
|
| TargetID: |
0
|
| Dumpstage: |
process exit
|
| Regiontype: |
stack
|
| Protect: |
page read and write
|
| Base address: |
697C000
|
| Size: |
16384
|
|
