611000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000000.00000002.1248056478.0000000000611000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
611000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Found malware configuration |
AV Detection |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
Sample uses string decryption to hide its real strings |
AV Detection |
|
|
4EA0000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000002.00000003.1232164142.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4EA0000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4830000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000000.00000003.1207439914.0000000004830000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4830000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4A40000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
0000000A.00000003.1580698899.0000000004A40000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4A40000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
341000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000002.00000002.1272974657.0000000000341000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
341000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
341000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
0000000A.00000002.3659626014.0000000000341000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
341000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
310000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3659526675.0000000000310000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
310000
|
Size: |
4096
|
|
360E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249256909.000000000360E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
360E000
|
Size: |
8192
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232716503.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
3BBF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662096052.0000000003BBF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3BBF000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578475943.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220614727.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
28D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581225688.00000000028D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
28D0000
|
Size: |
4096
|
|
BFA000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000BFA000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BFA000
|
Size: |
8192
|
|
340000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000002.00000000.1223721456.0000000000340000.00000002.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
340000
|
Size: |
4096
|
|
91E000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.000000000091E000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
91E000
|
Size: |
40960
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603043453.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220146628.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578310822.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
50FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663146020.00000000050FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
50FF000
|
Size: |
4096
|
|
90D000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3660914247.000000000090D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
90D000
|
Size: |
12288
|
|
30BE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661719830.00000000030BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
30BE000
|
Size: |
8192
|
|
5ECE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250134509.0000000005ECE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5ECE000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601817506.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
611000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.1200024129.0000000000611000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
611000
|
Size: |
188416
|
|
2ACE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248981360.0000000002ACE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2ACE000
|
Size: |
8192
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230772383.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232471073.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
414E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249538217.000000000414E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
414E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213664515.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4B7F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662573675.0000000004B7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4B7F000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213458587.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1217665470.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
C4F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224647903.0000000000C4F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C4F000
|
Size: |
106496
|
|
676000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248056478.0000000000676000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
676000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1209707401.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
49152
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232598523.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205360077.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
49152
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214336243.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
496F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249837367.000000000496F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
496F000
|
Size: |
4096
|
|
429F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275522207.000000000429F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
429F000
|
Size: |
4096
|
|
4A7C000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662550464.0000000004A7C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A7C000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220644101.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578099328.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
388E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249320677.000000000388E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
388E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214300270.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275572274.00000000043DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
43DF000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230694791.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212379680.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584340849.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
420000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247834912.0000000000420000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
420000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600352585.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
315E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274847524.000000000315E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
315E000
|
Size: |
8192
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207695716.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
C92000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224004302.0000000000C92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C92000
|
Size: |
69632
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211079343.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2C00000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231781714.0000000002C00000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2C00000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213060722.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
123E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274406744.000000000123E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
123E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603007899.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
FBF000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
FBF000
|
Size: |
94208
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
URLs found in memory or binary data |
Networking |
|
|
610000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248040915.0000000000610000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
610000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583228828.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1207288074.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
BE0000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206824146.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2CFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661579328.0000000002CFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2CFF000
|
Size: |
4096
|
|
3A1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275184362.0000000003A1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A1E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206908478.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229983631.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
3DDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275313865.0000000003DDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3DDE000
|
Size: |
8192
|
|
3BFE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662116060.0000000003BFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3BFE000
|
Size: |
8192
|
|
BF0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BF0000
|
Size: |
36864
|
|
3AF000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.00000000003AF000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
3AF000
|
Size: |
1630208
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584273919.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4A3C000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662525759.0000000004A3C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A3C000
|
Size: |
16384
|
|
CA4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248756623.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA4000
|
Size: |
20480
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232627090.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
401F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275426539.000000000401F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
401F000
|
Size: |
4096
|
|
D90000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661025157.0000000000D90000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D90000
|
Size: |
4096
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232789438.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FE0000
|
Size: |
4096
|
|
45BF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662434609.00000000045BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
45BF000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212808768.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580165279.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207859608.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
2F8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249089650.0000000002F8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F8F000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583208060.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1209834602.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229735502.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
389F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275115564.000000000389F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
389F000
|
Size: |
4096
|
|
CA4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224737439.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA4000
|
Size: |
20480
|
|
4A30000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1250001032.0000000004A30000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A30000
|
Size: |
4096
|
|
647000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.0000000000647000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
647000
|
Size: |
24576
|
|
324E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249168141.000000000324E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
324E000
|
Size: |
8192
|
|
EEE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661072986.0000000000EEE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
EEE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214168120.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
7E7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250359402.0000000007E7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7E7E000
|
Size: |
8192
|
|
341000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000000.1572926937.0000000000341000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
341000
|
Size: |
188416
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207673898.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601308236.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211223599.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
34CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249229732.00000000034CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
34CE000
|
Size: |
8192
|
|
4CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247896096.00000000004CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4CE000
|
Size: |
8192
|
|
31FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661763483.00000000031FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31FE000
|
Size: |
8192
|
|
43C0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249689841.00000000043C0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583921660.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
5070000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276285937.0000000005070000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5070000
|
Size: |
4096
|
|
3B1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275202848.0000000003B1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B1F000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662629765.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214127825.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
465F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275697246.000000000465F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
465F000
|
Size: |
4096
|
|
124E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274423925.000000000124E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
124E000
|
Size: |
155648
|
|
ACE000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248501679.0000000000ACE000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
ACE000
|
Size: |
8192
|
|
67F000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.000000000067F000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
67F000
|
Size: |
1630208
|
|
40BF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662270234.00000000040BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
40BF000
|
Size: |
4096
|
|
5020000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276075777.0000000005020000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5020000
|
Size: |
4096
|
|
357F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661872791.000000000357F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
357F000
|
Size: |
4096
|
|
124A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274423925.000000000124A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
124A000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214436127.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601063932.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1234665145.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
361F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275002607.000000000361F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
361F000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207644471.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
8192
|
|
3A7F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662051711.0000000003A7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A7F000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1580991828.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583395452.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602083573.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2FCE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249105129.0000000002FCE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2FCE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211694074.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210042359.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220821004.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601710261.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
50C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276444823.00000000050C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
50C0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211820965.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
491E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275846740.000000000491E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
491E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602908572.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1207213597.0000000000BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
BE0000
|
Size: |
53248
|
|
44BE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662415128.00000000044BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
44BE000
|
Size: |
8192
|
|
BDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248533058.0000000000BDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
BDF000
|
Size: |
4096
|
|
351E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274983773.000000000351E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
351E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212711184.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
C8E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C8E000
|
Size: |
12288
|
|
53BD000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663365898.00000000053BD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
53BD000
|
Size: |
12288
|
|
3FBE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662250643.0000000003FBE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3FBE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1209744412.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215213086.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220442773.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
410F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249523457.000000000410F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
410F000
|
Size: |
4096
|
|
80EC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250403296.00000000080EC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
80EC000
|
Size: |
16384
|
|
4AC0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250056827.0000000004AC0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4AC0000
|
Size: |
8192
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229751922.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
5E8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250115741.0000000005E8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5E8F000
|
Size: |
4096
|
|
CC9000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248804321.0000000000CC9000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CC9000
|
Size: |
16384
|
|
4C10000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662944593.0000000004C10000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4C10000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601477355.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
3E3F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662186374.0000000003E3F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E3F000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578410592.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
610F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250193541.000000000610F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
610F000
|
Size: |
4096
|
|
65D000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000000.1573043383.000000000065D000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
65D000
|
Size: |
1724416
|
|
34DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274960602.00000000034DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
34DF000
|
Size: |
4096
|
|
800000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000002.3660895368.0000000000800000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
800000
|
Size: |
8192
|
|
397E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662023526.000000000397E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
397E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600850936.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
F50000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580578409.0000000000F50000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F50000
|
Size: |
53248
|
|
E3C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274237309.0000000000E3C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
E3C000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212107340.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205788413.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
3C5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275243218.0000000003C5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C5F000
|
Size: |
4096
|
|
45C0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662455207.00000000045C0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C0000
|
Size: |
12288
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214511416.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229631848.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599600719.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581179470.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
5FCF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250153659.0000000005FCF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5FCF000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213798479.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4BE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662761499.0000000004BE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BE0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211153303.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662611032.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BA0000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578121545.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210854303.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
36BF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661915341.00000000036BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
36BF000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583059260.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
CAD000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224560235.0000000000CAD000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAD000
|
Size: |
57344
|
|
3D8E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249449820.0000000003D8E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D8E000
|
Size: |
8192
|
|
619000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.0000000000619000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
619000
|
Size: |
122880
|
|
92D000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.1200075719.000000000092D000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
92D000
|
Size: |
1724416
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210890464.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583423588.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
6770000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223474651.0000000006770000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6770000
|
Size: |
8192
|
|
CBC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000CBC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CBC000
|
Size: |
135168
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602383559.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
917000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.0000000000917000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
917000
|
Size: |
24576
|
|
53FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663410252.00000000053FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
53FE000
|
Size: |
8192
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583315223.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
C3E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3660975921.0000000000C3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
C3E000
|
Size: |
8192
|
|
4A50000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1250038857.0000000004A50000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A50000
|
Size: |
4096
|
|
C8E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224004302.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C8E000
|
Size: |
12288
|
|
343F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661831523.000000000343F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
343F000
|
Size: |
4096
|
|
C8E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C8E000
|
Size: |
12288
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584306908.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581201710.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206858898.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
379E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275096669.000000000379E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
379E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602971470.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
374E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249287925.000000000374E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
374E000
|
Size: |
8192
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578075066.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
6175000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223720110.0000000006175000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6175000
|
Size: |
114688
|
|
3C0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249403079.0000000003C0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C0F000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219290161.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
433F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662352340.000000000433F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
433F000
|
Size: |
4096
|
|
CC8000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225302819.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CC8000
|
Size: |
20480
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583113507.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210757622.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4A1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275890717.0000000004A1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A1F000
|
Size: |
4096
|
|
C92000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000C92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C92000
|
Size: |
69632
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603081966.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
C35000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000C35000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C35000
|
Size: |
16384
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602504574.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578250239.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
334F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249183651.000000000334F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
334F000
|
Size: |
4096
|
|
CA9000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224560235.0000000000CA9000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA9000
|
Size: |
4096
|
|
1050000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274308508.0000000001050000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1050000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581050092.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
3D3E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662163471.0000000003D3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D3E000
|
Size: |
8192
|
|
405E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275453353.000000000405E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
405E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212902309.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
47F0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205856128.00000000047F0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
47F0000
|
Size: |
176128
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580026727.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211502677.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
36FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661937870.00000000036FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
36FE000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601350562.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603115808.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579064564.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
143F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274537467.000000000143F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
143F000
|
Size: |
4096
|
|
28F0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661441881.00000000028F0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211335262.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
3F7F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662230501.0000000003F7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F7F000
|
Size: |
4096
|
|
35CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249243888.00000000035CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
35CF000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578144101.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211534978.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
569E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663515442.000000000569E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
569E000
|
Size: |
8192
|
|
338E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249199238.000000000338E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
338E000
|
Size: |
8192
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583339996.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
39CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249355054.00000000039CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
39CE000
|
Size: |
8192
|
|
11FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274389233.00000000011FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
11FF000
|
Size: |
4096
|
|
28FC000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661441881.00000000028FC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28FC000
|
Size: |
8192
|
|
320F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249151843.000000000320F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
320F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602841328.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
298E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248949811.000000000298E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
298E000
|
Size: |
8192
|
|
40FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662290351.00000000040FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
40FE000
|
Size: |
8192
|
|
5D8E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250095424.0000000005D8E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5D8E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210709690.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602541633.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
424F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249552077.000000000424F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
424F000
|
Size: |
4096
|
|
516E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663172353.000000000516E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
516E000
|
Size: |
8192
|
|
64E000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.000000000064E000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
64E000
|
Size: |
40960
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220237526.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232515669.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
C4D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248653981.0000000000C4D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C4D000
|
Size: |
4096
|
|
3AF000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.00000000003AF000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
3AF000
|
Size: |
1630208
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211565050.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205542523.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
7B04000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250257996.0000000007B04000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
7B04000
|
Size: |
4096
|
|
3D9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275294048.0000000003D9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D9F000
|
Size: |
4096
|
|
92D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.000000000092D000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
92D000
|
Size: |
4096
|
|
4F05000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1232164142.0000000004F05000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4F05000
|
Size: |
12288
|
|
4970000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1208064482.0000000004970000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4970000
|
Size: |
4096
|
|
BFE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000BFE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BFE000
|
Size: |
221184
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232426652.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
8192
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231400584.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602015329.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2C17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274557486.0000000002C17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2C17000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601239196.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231069631.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
2C00000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231891579.0000000002C00000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2C00000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1216249897.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584123195.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581133556.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600794973.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229917412.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
5050000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276232492.0000000005050000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5050000
|
Size: |
4096
|
|
294F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248934359.000000000294F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
294F000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1217705154.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229800525.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206368595.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
5C00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223666194.0000000005C00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5C00000
|
Size: |
8192
|
|
3ABE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662073221.0000000003ABE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3ABE000
|
Size: |
8192
|
|
F3D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274261802.0000000000F3D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F3D000
|
Size: |
12288
|
|
340000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1272776353.0000000000340000.00000004.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
340000
|
Size: |
4096
|
|
4A21000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231186482.0000000004A21000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4A21000
|
Size: |
241664
|
|
4E0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247915084.00000000004E0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4E0000
|
Size: |
16384
|
|
410000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247812553.0000000000410000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
410000
|
Size: |
4096
|
|
CBC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223945843.0000000000CBC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CBC000
|
Size: |
135168
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219652818.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206271923.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
CB7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219781620.0000000000CB7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CB7000
|
Size: |
57344
|
|
CA5000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219831128.0000000000CA5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA5000
|
Size: |
73728
|
|
4A21000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1234607463.0000000004A21000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4A21000
|
Size: |
49152
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583833552.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2AC000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3659459473.00000000002AC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2AC000
|
Size: |
16384
|
|
31BF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661741971.00000000031BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31BF000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215887679.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213165727.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579249886.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
26CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248870577.00000000026CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
26CF000
|
Size: |
4096
|
|
2D5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274631055.0000000002D5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D5F000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212841490.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4A20000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249982914.0000000004A20000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A20000
|
Size: |
4096
|
|
C8E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225195294.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C8E000
|
Size: |
12288
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210226139.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210119034.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4A10000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249965210.0000000004A10000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A10000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205433044.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
284E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248917890.000000000284E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
284E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219892443.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600522215.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
5030000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276144533.0000000005030000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5030000
|
Size: |
4096
|
|
CA4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA4000
|
Size: |
24576
|
|
610000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.1199965294.0000000000610000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
610000
|
Size: |
4096
|
|
3FCF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249495011.0000000003FCF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3FCF000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601552206.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213025433.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214471248.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583803797.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661550123.0000000002BFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2BFF000
|
Size: |
4096
|
|
341000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.1223753052.0000000000341000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
341000
|
Size: |
188416
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213909186.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220683591.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
28E0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581244977.00000000028E0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
28E0000
|
Size: |
4096
|
|
6140000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250211326.0000000006140000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6140000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229662271.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
676E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223474651.000000000676E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
676E000
|
Size: |
4096
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232687633.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600435298.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583773572.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579329082.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215824938.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579777468.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
225280
|
|
65E000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1274042982.000000000065E000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
65E000
|
Size: |
1703936
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220578597.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205720398.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
441E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275617594.000000000441E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
441E000
|
Size: |
8192
|
|
C6E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248689298.0000000000C6E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C6E000
|
Size: |
4096
|
|
4BC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662649951.0000000004BC0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BC0000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230045973.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
3A6000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1272974657.00000000003A6000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
3A6000
|
Size: |
16384
|
|
CBC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248772198.0000000000CBC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CBC000
|
Size: |
49152
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210932274.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2F7E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661670120.0000000002F7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F7E000
|
Size: |
8192
|
|
559E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663486243.000000000559E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
559E000
|
Size: |
8192
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581155580.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
4980000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207878644.0000000004980000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4980000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213511202.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602244890.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45D0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662455207.00000000045D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45D0000
|
Size: |
40960
|
|
4FF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232747550.0000000004FF0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FF0000
|
Size: |
4096
|
|
383E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661980027.000000000383E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
383E000
|
Size: |
8192
|
|
4EDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275943182.0000000004EDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4EDE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210011806.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213271069.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
10A0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274325936.00000000010A0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10A0000
|
Size: |
4096
|
|
67D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000000.1200060706.000000000067D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
67D000
|
Size: |
4096
|
|
FE1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000FE1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
FE1000
|
Size: |
4096
|
|
4C30000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3663017063.0000000004C30000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4C30000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205488690.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583681584.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
64E000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.000000000064E000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
64E000
|
Size: |
40960
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602128924.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
52BE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663312257.00000000052BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
52BE000
|
Size: |
8192
|
|
F9A000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000F9A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F9A000
|
Size: |
143360
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
URLs found in memory or binary data |
Networking |
|
|
2C0E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249011758.0000000002C0E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2C0E000
|
Size: |
8192
|
|
C4D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224647903.0000000000C4D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C4D000
|
Size: |
4096
|
|
3AD000
|
unkown
|
page write copy
|
|
|
|
Name: |
0000000A.00000000.1573009195.00000000003AD000.00000008.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
3AD000
|
Size: |
4096
|
|
2E3E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661623482.0000000002E3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E3E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220481287.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
D3F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3660999851.0000000000D3F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
D3F000
|
Size: |
4096
|
|
340000
|
unkown
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3659577888.0000000000340000.00000004.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
340000
|
Size: |
4096
|
|
49E0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249911112.00000000049E0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49E0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210252573.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215736587.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207759164.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601744915.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580127587.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
7C3C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250298107.0000000007C3C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7C3C000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210357007.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601191819.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4AC4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250056827.0000000004AC4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4AC4000
|
Size: |
12288
|
|
2BCF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248997116.0000000002BCF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2BCF000
|
Size: |
4096
|
|
C70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000C70000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C70000
|
Size: |
106496
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599855393.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212350975.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
438F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249577781.000000000438F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
438F000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231326892.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583454302.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583081743.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
5C06000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223666194.0000000005C06000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5C06000
|
Size: |
4096
|
|
50A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276379080.00000000050A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
50A0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211256111.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601778546.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
DA0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661047426.0000000000DA0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA0000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215949918.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45E0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662455207.00000000045E0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45E0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600637381.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4390000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249596083.0000000004390000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4390000
|
Size: |
4096
|
|
49B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249855183.00000000049B0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49B0000
|
Size: |
4096
|
|
4A40000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1250020945.0000000004A40000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A40000
|
Size: |
4096
|
|
4BD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662683448.0000000004BD0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BD0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584007381.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2C5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274608224.0000000002C5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2C5E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601982523.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
6770000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223611329.0000000006770000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6770000
|
Size: |
8192
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231353984.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583567199.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
479F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275762249.000000000479F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
479F000
|
Size: |
4096
|
|
CCC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219781620.0000000000CCC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CCC000
|
Size: |
8192
|
|
5040000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276204722.0000000005040000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5040000
|
Size: |
4096
|
|
F70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274286104.0000000000F70000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F70000
|
Size: |
4096
|
|
4A21000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229554530.0000000004A21000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4A21000
|
Size: |
49152
|
|
329E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274889812.000000000329E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
329E000
|
Size: |
8192
|
|
67D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.1248115143.000000000067D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
67D000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603219911.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212235928.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206466878.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
CAC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000CAC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAC000
|
Size: |
61440
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583249293.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
32FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661784972.00000000032FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
32FF000
|
Size: |
4096
|
|
65D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.000000000065D000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
65D000
|
Size: |
4096
|
|
7FEB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250382025.0000000007FEB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7FEB000
|
Size: |
20480
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583183817.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
4895000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1207439914.0000000004895000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4895000
|
Size: |
12288
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230172903.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220743996.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
325F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274867882.000000000325F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
325F000
|
Size: |
4096
|
|
CAC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223945843.0000000000CAC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAC000
|
Size: |
61440
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578542749.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
2DFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661600030.0000000002DFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2DFF000
|
Size: |
4096
|
|
340000
|
unkown
|
page readonly
|
|
|
|
Name: |
0000000A.00000000.1572899780.0000000000340000.00000002.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
340000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210537890.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
28C0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661420817.00000000028C0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28C0000
|
Size: |
4096
|
|
48DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275825157.00000000048DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
48DF000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602808979.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
49C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249874498.00000000049C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49C0000
|
Size: |
4096
|
|
333E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661810321.000000000333E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
333E000
|
Size: |
8192
|
|
F50000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580468634.0000000000F50000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F50000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211624718.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4B90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662592268.0000000004B90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B90000
|
Size: |
4096
|
|
C50000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248668705.0000000000C50000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C50000
|
Size: |
102400
|
|
2AFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661529875.0000000002AFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2AFF000
|
Size: |
4096
|
|
28F7000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661441881.00000000028F7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28F7000
|
Size: |
12288
|
|
F2B000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661096629.0000000000F2B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F2B000
|
Size: |
20480
|
|
DEE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248838065.0000000000DEE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DEE000
|
Size: |
8192
|
|
CAD000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000CAD000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAD000
|
Size: |
57344
|
|
280F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248901934.000000000280F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
280F000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229596308.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
4E60000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230242419.0000000004E60000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
4E60000
|
Size: |
180224
|
|
486E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249818151.000000000486E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
486E000
|
Size: |
8192
|
|
10B0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274346037.00000000010B0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B0000
|
Size: |
16384
|
|
65D000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.1223831018.000000000065D000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
65D000
|
Size: |
1724416
|
|
C92000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224245586.0000000000C92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C92000
|
Size: |
69632
|
|
4A00000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578822423.0000000004A00000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
4A00000
|
Size: |
167936
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602435157.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
4AA5000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580698899.0000000004AA5000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4AA5000
|
Size: |
12288
|
|
4FDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275989693.0000000004FDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4FDF000
|
Size: |
4096
|
|
C8E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248703647.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C8E000
|
Size: |
12288
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213746431.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
4990000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1208045582.0000000004990000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4990000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213584809.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2D4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249042191.0000000002D4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D4E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583712718.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2D9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274655707.0000000002D9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D9E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602764834.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212645609.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230437250.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
10FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274369715.00000000010FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
10FE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211441621.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215915833.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583892196.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230974645.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583862182.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
1AA000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247751375.00000000001AA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
1AA000
|
Size: |
24576
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211595057.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
25CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248853833.00000000025CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
25CE000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600032651.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578652147.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205658687.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583028937.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
348F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249214665.000000000348F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
348F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1582990128.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
49152
|
|
4D3B000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663084804.0000000004D3B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4D3B000
|
Size: |
20480
|
|
540000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.0000000000540000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
540000
|
Size: |
872448
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599661078.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229854722.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207738528.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206545091.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600243953.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584180068.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
29FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661507055.00000000029FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
29FF000
|
Size: |
4096
|
|
3ACE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249371234.0000000003ACE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3ACE000
|
Size: |
8192
|
|
C4F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224705573.0000000000C4F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C4F000
|
Size: |
106496
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1580002422.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
6150000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250229699.0000000006150000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6150000
|
Size: |
151552
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206165399.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
301E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274780739.000000000301E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
301E000
|
Size: |
8192
|
|
800000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1274213306.0000000000800000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
800000
|
Size: |
8192
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581110558.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584208726.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601005155.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210191935.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
33DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274937499.00000000033DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
33DE000
|
Size: |
8192
|
|
393F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662003797.000000000393F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
393F000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579409850.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
5D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247980916.00000000005D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5D0000
|
Size: |
4096
|
|
3E8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249465451.0000000003E8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E8F000
|
Size: |
4096
|
|
35BE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661894203.00000000035BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
35BE000
|
Size: |
8192
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232567885.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581023900.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603149281.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212062727.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583162235.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
423E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662329500.000000000423E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
423E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220192786.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602347317.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
50B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276403349.00000000050B0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
50B0000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229718786.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601675425.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
C3A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000C3A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C3A000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207839946.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
F95000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000F95000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F95000
|
Size: |
4096
|
|
CA4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA4000
|
Size: |
24576
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578048365.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
49152
|
|
41FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662309883.00000000041FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41FF000
|
Size: |
4096
|
|
7D3C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250318850.0000000007D3C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7D3C000
|
Size: |
16384
|
|
415F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275478319.000000000415F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
415F000
|
Size: |
4096
|
|
3EDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275373307.0000000003EDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3EDF000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211364167.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
49F0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249929151.00000000049F0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49F0000
|
Size: |
4096
|
|
4A00000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249947151.0000000004A00000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A00000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211659910.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211045298.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
C92000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225195294.0000000000C92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C92000
|
Size: |
69632
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211118178.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
CBC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224560235.0000000000CBC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CBC000
|
Size: |
135168
|
|
7FE000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1274193272.00000000007FE000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
7FE000
|
Size: |
8192
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578722521.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584093862.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220276986.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
C40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248547762.0000000000C40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C40000
|
Size: |
45056
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211468917.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
398F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249338166.000000000398F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
398F000
|
Size: |
4096
|
|
339F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274913207.000000000339F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
339F000
|
Size: |
4096
|
|
48E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247872321.000000000048E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
48E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601115245.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
65E000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000002.3660719233.000000000065E000.00000080.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
65E000
|
Size: |
1703936
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601899474.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1216680400.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
647000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.0000000000647000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
647000
|
Size: |
24576
|
|
4C00000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662855656.0000000004C00000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4C00000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212939256.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584064060.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212763826.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212171646.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1218701204.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
6761000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223474651.0000000006761000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6761000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601611699.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
CCE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225302819.0000000000CCE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CCE000
|
Size: |
61440
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599558449.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602308147.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2F3F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661646650.0000000002F3F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F3F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600575563.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1212968604.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
2A8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248965559.0000000002A8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2A8F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583366260.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
526F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663250525.000000000526F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
526F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584151480.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
C69000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000C69000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C69000
|
Size: |
135168
|
|
270E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248886077.000000000270E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
270E000
|
Size: |
8192
|
|
3A6000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659626014.00000000003A6000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
3A6000
|
Size: |
16384
|
|
2C10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274557486.0000000002C10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2C10000
|
Size: |
16384
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219739597.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206643289.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
6760000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223611329.0000000006760000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6760000
|
Size: |
4096
|
|
447F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662396079.000000000447F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
447F000
|
Size: |
4096
|
|
38DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275137366.00000000038DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
38DE000
|
Size: |
8192
|
|
283E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661343770.000000000283E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
283E000
|
Size: |
8192
|
|
4C20000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662976896.0000000004C20000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4C20000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230594837.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
3C9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275269987.0000000003C9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C9E000
|
Size: |
8192
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581086787.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
CAD000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248772198.0000000000CAD000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAD000
|
Size: |
57344
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219689252.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601942077.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1578191278.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
5C05000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223589006.0000000005C05000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5C05000
|
Size: |
8192
|
|
42DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275544393.00000000042DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
42DE000
|
Size: |
8192
|
|
455E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275666111.000000000455E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
455E000
|
Size: |
8192
|
|
3AD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000002.1273139912.00000000003AD000.00000008.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
3AD000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214561224.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579507811.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213092489.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602871654.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
375F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275070832.000000000375F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
375F000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230880134.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210496521.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
92E000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.1248383789.000000000092E000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
92E000
|
Size: |
1703936
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1249893020.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
3B0E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249387954.0000000003B0E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B0E000
|
Size: |
8192
|
|
AB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247725456.00000000000AB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
AB000
|
Size: |
20480
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220779165.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
3AD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000000.1223810120.00000000003AD000.00000008.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
3AD000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579941522.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
4FFE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663113129.0000000004FFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4FFE000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601856414.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602172708.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211400205.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232653529.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
384F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249304185.000000000384F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
384F000
|
Size: |
4096
|
|
419E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275499818.000000000419E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
419E000
|
Size: |
8192
|
|
47DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275785592.00000000047DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
47DE000
|
Size: |
8192
|
|
311F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274802598.000000000311F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
311F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583741095.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
437E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662375441.000000000437E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
437E000
|
Size: |
8192
|
|
310E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249136177.000000000310E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
310E000
|
Size: |
8192
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1234640020.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
2E4F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249058397.0000000002E4F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E4F000
|
Size: |
4096
|
|
7D7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250339111.0000000007D7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7D7D000
|
Size: |
12288
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229679954.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1209972390.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
451F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275643296.000000000451F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
451F000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602942349.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1229699050.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
2E8E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249073724.0000000002E8E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E8E000
|
Size: |
8192
|
|
8E9000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.00000000008E9000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
8E9000
|
Size: |
122880
|
|
CBC000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223751977.0000000000CBC000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CBC000
|
Size: |
135168
|
|
1240000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274423925.0000000001240000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1240000
|
Size: |
32768
|
|
43D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249689841.00000000043D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43D0000
|
Size: |
8192
|
|
4E5000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1247915084.00000000004E5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4E5000
|
Size: |
8192
|
|
365E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275031918.000000000365E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
365E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211006776.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231265179.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
F98000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000F98000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F98000
|
Size: |
4096
|
|
7B00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250257996.0000000007B00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
7B00000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583652315.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584371456.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
5080000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276328569.0000000005080000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5080000
|
Size: |
4096
|
|
4BF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3662798358.0000000004BF0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BF0000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1217745696.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214597978.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1211190857.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
5060000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276257977.0000000005060000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5060000
|
Size: |
4096
|
|
287E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661369415.000000000287E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
287E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602643494.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2FDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274749960.0000000002FDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2FDF000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600911727.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
AD0000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.1248517549.0000000000AD0000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
AD0000
|
Size: |
8192
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1205594713.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
2EDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274701014.0000000002EDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2EDE000
|
Size: |
8192
|
|
CB8000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219996906.0000000000CB8000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CB8000
|
Size: |
131072
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231295963.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
5E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206068298.00000000005E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5E0000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599984443.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
2BE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1230109067.0000000002BE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2BE0000
|
Size: |
53248
|
|
810000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1248130567.0000000000810000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
810000
|
Size: |
872448
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213950496.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
307F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661697872.000000000307F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
307F000
|
Size: |
4096
|
|
5F0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248001535.00000000005F0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5F0000
|
Size: |
20480
|
|
28C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1581265111.00000000028C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
28C0000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207814335.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584035655.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220517166.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
C92000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248703647.0000000000C92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C92000
|
Size: |
69632
|
|
2E9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1274674682.0000000002E9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E9F000
|
Size: |
4096
|
|
3AD000
|
unkown
|
page write copy
|
|
|
|
Name: |
0000000A.00000002.3659857594.00000000003AD000.00000008.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
3AD000
|
Size: |
4096
|
|
540000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3659914672.0000000000540000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
540000
|
Size: |
872448
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599805517.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
30CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249121037.00000000030CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
30CF000
|
Size: |
4096
|
|
5F7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248001535.00000000005F7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5F7000
|
Size: |
32768
|
|
428E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249564723.000000000428E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
428E000
|
Size: |
8192
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583137478.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
400E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249508646.000000000400E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
400E000
|
Size: |
8192
|
|
3E7E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662211064.0000000003E7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E7E000
|
Size: |
8192
|
|
9E0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3660944670.00000000009E0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
9E0000
|
Size: |
4096
|
|
39DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275159162.00000000039DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
39DF000
|
Size: |
4096
|
|
10B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1231235876.00000000010B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
10B4000
|
Size: |
4096
|
|
347E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661852355.000000000347E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
347E000
|
Size: |
8192
|
|
C6F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224004302.0000000000C6F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C6F000
|
Size: |
110592
|
|
4A20000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275920323.0000000004A20000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4A20000
|
Size: |
4096
|
|
600E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1250174013.000000000600E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
600E000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1215679354.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214213407.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210075763.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
28BE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661391049.00000000028BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28BE000
|
Size: |
8192
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1219524499.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
37FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661959886.00000000037FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
37FF000
|
Size: |
4096
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579160259.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
3D4F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249433773.0000000003D4F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D4F000
|
Size: |
4096
|
|
5090000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1276356585.0000000005090000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5090000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220550748.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1207778841.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
F68000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000F68000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F68000
|
Size: |
176128
|
|
43C4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249689841.00000000043C4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C4000
|
Size: |
8192
|
|
65D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.000000000065D000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
65D000
|
Size: |
4096
|
|
F60000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000F60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
24576
|
|
CA4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224004302.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA4000
|
Size: |
24576
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1584240641.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1210805913.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
3ECE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249479797.0000000003ECE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3ECE000
|
Size: |
8192
|
|
3F1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275395753.0000000003F1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F1E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583950290.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1213121749.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583605242.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
370F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249271212.000000000370F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
370F000
|
Size: |
4096
|
|
3CFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3662140038.0000000003CFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3CFF000
|
Size: |
4096
|
|
54FC000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3663444889.00000000054FC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
54FC000
|
Size: |
16384
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1601429206.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
DA4000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579917638.0000000000DA4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
DA4000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599717715.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
CCE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248804321.0000000000CCE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CCE000
|
Size: |
61440
|
|
2D0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249027159.0000000002D0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D0F000
|
Size: |
4096
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214080465.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
3C4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249417510.0000000003C4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C4E000
|
Size: |
8192
|
|
F30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1579638389.0000000000F30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F30000
|
Size: |
53248
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602046836.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602211966.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
FD8000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000002.3661118709.0000000000FD8000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
FD8000
|
Size: |
32768
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
619000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1273182245.0000000000619000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
619000
|
Size: |
122880
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1602707718.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
43B0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1249689841.00000000043B0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B0000
|
Size: |
36864
|
|
469E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275739403.000000000469E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
469E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1599914123.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
7FE000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000002.3660874896.00000000007FE000.00000040.00000001.01000000.00000009.sdmp
|
TargetID: |
10
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
7FE000
|
Size: |
8192
|
|
C74000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1248703647.0000000000C74000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C74000
|
Size: |
90112
|
|
5000000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1232766485.0000000005000000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5000000
|
Size: |
4096
|
|
3B5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1275222930.0000000003B5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B5E000
|
Size: |
8192
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1603185102.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1583979157.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|
CCF000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1220034115.0000000000CCF000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CCF000
|
Size: |
36864
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1206769255.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
237568
|
|
43B1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1214670970.00000000043B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43B1000
|
Size: |
4096
|
|
45C1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1600486423.00000000045C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45C1000
|
Size: |
4096
|
|