E91000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000000.00000002.979950125.0000000000E91000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
E91000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Found malware configuration |
AV Detection |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
Sample uses string decryption to hide its real strings |
AV Detection |
|
|
171000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000002.00000002.1024637445.0000000000171000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
171000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4DE0000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000002.00000003.984347300.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4DE0000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4E10000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000000.00000003.933337144.0000000004E10000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4E10000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4960000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000001.00000003.978435837.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4960000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
0000000B.00000003.1548416588.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
171000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000001.00000002.1018856608.0000000000171000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
171000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
B52000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939836101.0000000000B52000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B52000
|
Size: |
40960
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935748899.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
3A9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025993200.0000000003A9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A9E000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.954793446.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
61D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1025090298.000000000061D000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
61D000
|
Size: |
8192
|
|
4A60000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.965357271.0000000004A60000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
4A60000
|
Size: |
163840
|
|
44CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1021025108.00000000044CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
44CF000
|
Size: |
4096
|
|
C1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019530662.0000000000C1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
C1E000
|
Size: |
8192
|
|
284E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019697126.000000000284E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
284E000
|
Size: |
8192
|
|
5020000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982088138.0000000005020000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5020000
|
Size: |
4096
|
|
B16000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.945159690.0000000000B16000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B16000
|
Size: |
65536
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938337425.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
824C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982336406.000000000824C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
824C000
|
Size: |
16384
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548753599.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939085470.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551295213.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566730290.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567638052.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936604868.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.976075457.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933585513.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.986567964.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
4096
|
|
DAE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979359994.0000000000DAE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DAE000
|
Size: |
8192
|
|
28D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019752391.00000000028D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D0000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984579452.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
341F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025762802.000000000341F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
341F000
|
Size: |
4096
|
|
31AF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980781851.00000000031AF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31AF000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.982505020.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
4096
|
|
E30000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979561109.0000000000E30000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
E30000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567363170.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.916933843.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551008890.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
AC1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000AC1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AC1000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979331950.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4B40000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021295783.0000000004B40000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B40000
|
Size: |
4096
|
|
486E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981811173.000000000486E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
486E000
|
Size: |
8192
|
|
41EF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981664476.00000000041EF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41EF000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550536509.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
49152
|
|
4AF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021118630.0000000004AF0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AF0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939596550.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936863703.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4B50000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021351707.0000000004B50000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B50000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940135419.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
320F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020036309.000000000320F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
320F000
|
Size: |
4096
|
|
4960000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.978306605.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936693481.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
3F5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026112005.0000000003F5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F5F000
|
Size: |
4096
|
|
2FCE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019950537.0000000002FCE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2FCE000
|
Size: |
8192
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935915597.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.974286275.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
5000000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982061848.0000000005000000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5000000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903512341.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
C7A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019582498.0000000000C7A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C7A000
|
Size: |
8192
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984713768.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
3AAE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981209871.0000000003AAE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3AAE000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939570064.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
35AE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980950141.00000000035AE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
35AE000
|
Size: |
8192
|
|
EF6000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.979950125.0000000000EF6000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
EF6000
|
Size: |
16384
|
|
34CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020225578.00000000034CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
34CE000
|
Size: |
8192
|
|
422E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981677502.000000000422E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
422E000
|
Size: |
8192
|
|
1DD000
|
unkown
|
page write copy
|
|
|
|
Name: |
0000000B.00000000.1517527677.00000000001DD000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
11
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
1DD000
|
Size: |
4096
|
|
396E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981178121.000000000396E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
396E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567431336.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
43B000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.000000000043B000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
43B000
|
Size: |
122880
|
|
4F1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026519600.0000000004F1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4F1F000
|
Size: |
4096
|
|
A7E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000A7E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A7E000
|
Size: |
225280
|
|
309E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025660495.000000000309E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
309E000
|
Size: |
8192
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933721867.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
B3F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979047218.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3F000
|
Size: |
147456
|
|
B17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943797945.0000000000B17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B17000
|
Size: |
61440
|
|
40AF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981632939.00000000040AF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
40AF000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.976178823.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
49152
|
|
A7A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000A7A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A7A000
|
Size: |
8192
|
|
5000000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026730495.0000000005000000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5000000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903533080.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
338E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020187884.000000000338E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
338E000
|
Size: |
8192
|
|
2D0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019859868.0000000002D0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D0F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568782643.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936671439.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930246571.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
496F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981824601.000000000496F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
496F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568465319.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567172617.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
1DD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000000.948841065.00000000001DD000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
1DD000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.982381682.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
49152
|
|
37DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025886167.00000000037DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
37DF000
|
Size: |
4096
|
|
B3C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940403426.0000000000B3C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3C000
|
Size: |
4096
|
|
4AD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979450645.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AD0000
|
Size: |
4096
|
|
6230000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943185724.0000000006230000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6230000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936412481.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984550282.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
8192
|
|
7CA000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.974325870.00000000007CA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7CA000
|
Size: |
24576
|
|
B10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944595261.0000000000B10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B10000
|
Size: |
12288
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937507664.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936258437.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935930274.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
310E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019987894.000000000310E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
310E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568567328.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
30AE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980769222.00000000030AE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
30AE000
|
Size: |
8192
|
|
1080000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.0000000001080000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1080000
|
Size: |
880640
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566671231.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.982285377.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933643021.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
43CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1021002313.00000000043CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
43CE000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936978126.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.972601875.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938312956.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548735298.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
482000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.948857156.0000000000482000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
482000
|
Size: |
1699840
|
|
305F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025641775.000000000305F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
305F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568489983.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
46DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026361237.00000000046DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
46DF000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984648474.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568519873.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
2E2E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980715021.0000000002E2E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E2E000
|
Size: |
8192
|
|
36EE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981032430.00000000036EE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
36EE000
|
Size: |
8192
|
|
133D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980643082.000000000133D000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
133D000
|
Size: |
8192
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936297685.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4990000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981837109.0000000004990000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4990000
|
Size: |
16384
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930590407.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
3CDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026042623.0000000003CDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3CDF000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.969793537.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
AA5000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019476665.0000000000AA5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AA5000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.981503024.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937578459.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550960312.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567614496.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938889342.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
171000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000B.00000000.1517449172.0000000000171000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
11
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
171000
|
Size: |
188416
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568018488.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B3F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943639983.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3F000
|
Size: |
147456
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.913224672.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
400E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020827980.000000000400E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
400E000
|
Size: |
8192
|
|
838E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982372284.000000000838E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
838E000
|
Size: |
8192
|
|
4B90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021430963.0000000004B90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B90000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567460229.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026687716.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FE0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935536835.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
49152
|
|
49C5000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1548416588.00000000049C5000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
49C5000
|
Size: |
12288
|
|
4F40000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984733328.0000000004F40000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F40000
|
Size: |
4096
|
|
37EF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981086459.00000000037EF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
37EF000
|
Size: |
4096
|
|
B14000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978498782.0000000000B14000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B14000
|
Size: |
8192
|
|
6D70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943149505.0000000006D70000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6D70000
|
Size: |
4096
|
|
4960000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026480759.0000000004960000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
4096
|
|
3D8E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020758504.0000000003D8E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D8E000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.973104827.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936626632.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
8192
|
|
4DE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.984148985.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4DE0000
|
Size: |
53248
|
|
469000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.0000000000469000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
469000
|
Size: |
40960
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938205133.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
2D4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019876924.0000000002D4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D4E000
|
Size: |
8192
|
|
346E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980916079.000000000346E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
346E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936312429.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548615900.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568682916.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936466010.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
472E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981785105.000000000472E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
472E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568658735.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548644117.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
41DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026179193.00000000041DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41DF000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938013353.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.952549184.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
45EE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981758745.00000000045EE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
45EE000
|
Size: |
8192
|
|
44AE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981731852.00000000044AE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
44AE000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.971033593.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937380761.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
7BD000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019404944.00000000007BD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7BD000
|
Size: |
12288
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903006946.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
EFF000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.0000000000EFF000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
EFF000
|
Size: |
1568768
|
|
61F000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1025109603.000000000061F000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
61F000
|
Size: |
8192
|
|
4FB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026633366.0000000004FB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FB0000
|
Size: |
4096
|
|
EFD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.979997091.0000000000EFD000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
EFD000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.980746828.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4960000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.977485518.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
53248
|
|
360000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.0000000000360000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
360000
|
Size: |
880640
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933660856.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
2900000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019768400.0000000002900000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2900000
|
Size: |
16384
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930334005.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
49152
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550885322.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
483000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000001.00000002.1019211549.0000000000483000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
483000
|
Size: |
1679360
|
|
AD0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978374576.0000000000AD0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AD0000
|
Size: |
110592
|
|
359E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025819855.000000000359E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
359E000
|
Size: |
8192
|
|
64BF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982207579.00000000064BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
64BF000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.905418799.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.973634877.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
28CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019734502.00000000028CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28CE000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1546573904.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982075740.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
39CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020533404.00000000039CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
39CE000
|
Size: |
8192
|
|
B3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939686829.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3B000
|
Size: |
4096
|
|
46EF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981772393.00000000046EF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
46EF000
|
Size: |
4096
|
|
2CDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025552728.0000000002CDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2CDE000
|
Size: |
8192
|
|
F70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025273467.0000000000F70000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F70000
|
Size: |
32768
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.955638536.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567536689.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936906231.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
334F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020169418.000000000334F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
334F000
|
Size: |
4096
|
|
3BDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026026459.0000000003BDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3BDE000
|
Size: |
8192
|
|
381E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025907231.000000000381E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
381E000
|
Size: |
8192
|
|
4B60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021376205.0000000004B60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B60000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568244672.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566979514.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
AEB000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943709840.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AEB000
|
Size: |
135168
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938284529.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567838155.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
2A0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019806837.0000000002A0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2A0F000
|
Size: |
4096
|
|
3E5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026095412.0000000003E5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E5E000
|
Size: |
8192
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.908607388.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935781277.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
3FAE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981607193.0000000003FAE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3FAE000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.978753320.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936228988.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4960000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1547600400.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
53248
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936066861.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
170000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000001.00000000.944197595.0000000000170000.00000002.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
170000
|
Size: |
4096
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1526468098.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.975353170.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
3ACF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020602569.0000000003ACF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3ACF000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938158494.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1528785546.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936926406.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026576156.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
3D1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026058999.0000000003D1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D1E000
|
Size: |
8192
|
|
61F000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000001.00000002.1019365931.000000000061F000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
61F000
|
Size: |
8192
|
|
4AC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979391827.0000000004AC0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AC0000
|
Size: |
4096
|
|
ABD000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000ABD000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
ABD000
|
Size: |
4096
|
|
63BE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982193328.00000000063BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
63BE000
|
Size: |
8192
|
|
2C9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025536267.0000000002C9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2C9F000
|
Size: |
4096
|
|
1194000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.0000000001194000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1194000
|
Size: |
36864
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.979927580.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937407022.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
414E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020865885.000000000414E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
414E000
|
Size: |
8192
|
|
495F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026462088.000000000495F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
495F000
|
Size: |
4096
|
|
B26000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943639983.0000000000B26000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B26000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550672762.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
40DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026161664.00000000040DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
40DE000
|
Size: |
8192
|
|
459F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026321471.000000000459F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
459F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937271706.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1524952816.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
4FF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026712926.0000000004FF0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FF0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936496415.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984698270.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
2F1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025605825.0000000002F1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F1F000
|
Size: |
4096
|
|
4E4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981938893.0000000004E4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4E4E000
|
Size: |
8192
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984680743.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
4FC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982010013.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FC0000
|
Size: |
4096
|
|
BC5000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025164900.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BC5000
|
Size: |
8192
|
|
49C5000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.978435837.00000000049C5000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
49C5000
|
Size: |
12288
|
|
4B10000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021186633.0000000004B10000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B10000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938743564.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
3F6F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981590789.0000000003F6F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F6F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568633559.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936809746.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
11A2000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.00000000011A2000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
11A2000
|
Size: |
4096
|
|
11A2000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.897857261.00000000011A2000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
11A2000
|
Size: |
1699840
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939749652.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
170000
|
unkown
|
page readonly
|
|
|
|
Name: |
0000000B.00000000.1517386530.0000000000170000.00000002.00000001.01000000.00000007.sdmp
|
TargetID: |
11
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
170000
|
Size: |
4096
|
|
4E75000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.933337144.0000000004E75000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4E75000
|
Size: |
12288
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930650809.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937609626.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.906161320.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
3A5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025967355.0000000003A5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A5F000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936271888.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936049814.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
2F2F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980727539.0000000002F2F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F2F000
|
Size: |
4096
|
|
3D2E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981528181.0000000003D2E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D2E000
|
Size: |
8192
|
|
DEE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979383873.0000000000DEE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DEE000
|
Size: |
8192
|
|
61D000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1019345053.000000000061D000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
61D000
|
Size: |
8192
|
|
1E0000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000001.944771601.00000000001E0000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
image loaded
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1E0000
|
Size: |
802816
|
|
B17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943709840.0000000000B17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B17000
|
Size: |
61440
|
|
B17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978754960.0000000000B17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B17000
|
Size: |
61440
|
|
3E2F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981561080.0000000003E2F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E2F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568705785.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
374E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020329656.000000000374E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
374E000
|
Size: |
8192
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.904295507.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
123F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025413001.000000000123F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
123F000
|
Size: |
4096
|
|
2F5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025623849.0000000002F5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F5E000
|
Size: |
8192
|
|
B3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.945082675.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3B000
|
Size: |
12288
|
|
3FCF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020811589.0000000003FCF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3FCF000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567907621.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
3CEF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981468410.0000000003CEF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3CEF000
|
Size: |
4096
|
|
445F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026269171.000000000445F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
445F000
|
Size: |
4096
|
|
170000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1024613012.0000000000170000.00000004.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
170000
|
Size: |
4096
|
|
B2D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978887912.0000000000B2D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B2D000
|
Size: |
53248
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566804790.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943709840.0000000000B10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B10000
|
Size: |
12288
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937865387.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567865806.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
5030000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982134757.0000000005030000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5030000
|
Size: |
4096
|
|
B10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943797945.0000000000B10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B10000
|
Size: |
12288
|
|
4FD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982022641.0000000004FD0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FD0000
|
Size: |
4096
|
|
5040000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982149387.0000000005040000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5040000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937481083.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
3B0E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020619759.0000000003B0E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B0E000
|
Size: |
8192
|
|
4AC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548818994.0000000004AC0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AC0000
|
Size: |
4096
|
|
3E8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020778085.0000000003E8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E8F000
|
Size: |
4096
|
|
E47000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979647689.0000000000E47000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
E47000
|
Size: |
32768
|
|
AF8000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978498782.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AF8000
|
Size: |
81920
|
|
2C0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019843329.0000000002C0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2C0F000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568275159.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551038173.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
471E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026379799.000000000471E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
471E000
|
Size: |
8192
|
|
64FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982220832.00000000064FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
64FE000
|
Size: |
8192
|
|
449E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026289564.000000000449E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
449E000
|
Size: |
8192
|
|
410F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020847443.000000000410F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
410F000
|
Size: |
4096
|
|
BCE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019512035.0000000000BCE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
BCE000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.975136089.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1529504188.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936761746.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
663E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982260169.000000000663E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
663E000
|
Size: |
8192
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935564736.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B52000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940403426.0000000000B52000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B52000
|
Size: |
40960
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939543611.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567304499.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
C60000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019566492.0000000000C60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C60000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940183109.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930360113.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568589388.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
E2E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979447936.0000000000E2E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
E2E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568297866.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551236601.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937643549.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
F3E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025242103.0000000000F3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F3E000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.972213158.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548716016.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
2A97000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025479916.0000000002A97000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2A97000
|
Size: |
8192
|
|
11A3000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.980556681.00000000011A3000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
11A3000
|
Size: |
1679360
|
|
B90000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979260522.0000000000B90000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B90000
|
Size: |
16384
|
|
4B20000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021206276.0000000004B20000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B20000
|
Size: |
4096
|
|
398F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020443982.000000000398F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
398F000
|
Size: |
4096
|
|
45D0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1522408336.00000000045D0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
45D0000
|
Size: |
139264
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930501800.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567123872.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
6D7E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943067523.0000000006D7E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6D7E000
|
Size: |
4096
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1530735402.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
B52000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939655325.0000000000B52000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B52000
|
Size: |
4096
|
|
3D4F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020726167.0000000003D4F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D4F000
|
Size: |
4096
|
|
2A90000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025479916.0000000002A90000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2A90000
|
Size: |
16384
|
|
2DDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025569789.0000000002DDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2DDF000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933770103.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
CAE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979294865.0000000000CAE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CAE000
|
Size: |
8192
|
|
4AB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548852319.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AB0000
|
Size: |
4096
|
|
345E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025782468.000000000345E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
345E000
|
Size: |
8192
|
|
332E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980818655.000000000332E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
332E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940024626.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
A30000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.974558067.0000000000A30000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A30000
|
Size: |
4096
|
|
B3C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939655325.0000000000B3C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3C000
|
Size: |
61440
|
|
4960000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1548305233.0000000004960000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4960000
|
Size: |
53248
|
|
4A80000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903076336.0000000004A80000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
4A80000
|
Size: |
159744
|
|
32EF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980806748.00000000032EF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
32EF000
|
Size: |
4096
|
|
170000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000002.00000000.948747796.0000000000170000.00000002.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
170000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551357233.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
2B9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025515946.0000000002B9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2B9F000
|
Size: |
4096
|
|
8700000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982452980.0000000008700000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
8700000
|
Size: |
110592
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568216022.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1546545876.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935811966.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
3B9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026011420.0000000003B9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B9F000
|
Size: |
4096
|
|
AA0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019476665.0000000000AA0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AA0000
|
Size: |
16384
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938381936.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548697482.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936581192.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
8192
|
|
43B000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.000000000043B000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
43B000
|
Size: |
122880
|
|
4F70000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026538148.0000000004F70000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F70000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937339089.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943639983.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3B000
|
Size: |
12288
|
|
50B0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982162494.00000000050B0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
50B0000
|
Size: |
8192
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.967579539.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936158069.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
A70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000A70000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A70000
|
Size: |
36864
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936242797.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937968224.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935960398.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4F60000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981970836.0000000004F60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
395E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025948545.000000000395E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
395E000
|
Size: |
8192
|
|
331E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025743051.000000000331E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
331E000
|
Size: |
8192
|
|
2E1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025587468.0000000002E1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E1E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566849674.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938422482.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
F50000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025258269.0000000000F50000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F50000
|
Size: |
4096
|
|
6D80000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943067523.0000000006D80000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6D80000
|
Size: |
8192
|
|
4B30000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021275473.0000000004B30000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B30000
|
Size: |
4096
|
|
482000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.0000000000482000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
482000
|
Size: |
4096
|
|
F8C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025273467.0000000000F8C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F8C000
|
Size: |
57344
|
|
B39000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939886313.0000000000B39000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B39000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567485685.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568428239.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.977512314.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937453612.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
673F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982275005.000000000673F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
673F000
|
Size: |
4096
|
|
AB6000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000AB6000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AB6000
|
Size: |
16384
|
|
1DD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000002.1024701161.00000000001DD000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
1DD000
|
Size: |
4096
|
|
485E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026415957.000000000485E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
485E000
|
Size: |
8192
|
|
E90000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.897788343.0000000000E90000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
E90000
|
Size: |
4096
|
|
342F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980831589.000000000342F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
342F000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.909397700.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939357555.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B25000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939686829.0000000000B25000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B25000
|
Size: |
86016
|
|
A9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019458929.0000000000A9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
A9E000
|
Size: |
8192
|
|
31DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025703729.00000000031DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31DE000
|
Size: |
8192
|
|
370F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020313555.000000000370F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
370F000
|
Size: |
4096
|
|
116F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019661742.000000000116F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
116F000
|
Size: |
4096
|
|
2A60000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025463101.0000000002A60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2A60000
|
Size: |
4096
|
|
ACE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944924506.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
ACE000
|
Size: |
118784
|
|
C7E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019582498.0000000000C7E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C7E000
|
Size: |
155648
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936736964.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
1DF000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.00000000001DF000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1DF000
|
Size: |
1568768
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936439624.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
1189000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.0000000001189000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1189000
|
Size: |
40960
|
|
3E1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026077174.0000000003E1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E1F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938550729.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935992113.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979244693.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
B14000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944595261.0000000000B14000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B14000
|
Size: |
73728
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937909296.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938928818.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
8192
|
|
3ECE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020795886.0000000003ECE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3ECE000
|
Size: |
8192
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1540914404.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
E8B000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979909075.0000000000E8B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
E8B000
|
Size: |
20480
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021414133.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
6D80000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943149505.0000000006D80000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6D80000
|
Size: |
8192
|
|
F7A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025273467.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
F7A000
|
Size: |
69632
|
|
421E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026199421.000000000421E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
421E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938856542.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
2F8F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019931892.0000000002F8F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F8F000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.982430798.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979278669.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.910261305.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
C5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019548307.0000000000C5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
C5E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940088318.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903351159.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
EFD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000000.897842895.0000000000EFD000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
EFD000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.913996970.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984629825.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
4E10000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.932513447.0000000004E10000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4E10000
|
Size: |
53248
|
|
BE0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025207209.0000000000BE0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BE0000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568129749.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4FD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026666914.0000000004FD0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FD0000
|
Size: |
4096
|
|
2DEF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980702255.0000000002DEF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2DEF000
|
Size: |
4096
|
|
4F4F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981956859.0000000004F4F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4F4F000
|
Size: |
4096
|
|
848E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982396637.000000000848E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
848E000
|
Size: |
8192
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935825353.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903440052.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4F70000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933741049.0000000004F70000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F70000
|
Size: |
4096
|
|
360000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.0000000000360000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
360000
|
Size: |
880640
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
428E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020924512.000000000428E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
428E000
|
Size: |
8192
|
|
144F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980670826.000000000144F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
144F000
|
Size: |
4096
|
|
170000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1018834025.0000000000170000.00000004.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
170000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.982463985.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
4096
|
|
3C4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020708513.0000000003C4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C4E000
|
Size: |
8192
|
|
382E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981102324.000000000382E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
382E000
|
Size: |
8192
|
|
2A1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025429852.0000000002A1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2A1E000
|
Size: |
8192
|
|
35CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020244347.00000000035CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
35CF000
|
Size: |
4096
|
|
85FB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982412602.00000000085FB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
85FB000
|
Size: |
20480
|
|
B3F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.945082675.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3F000
|
Size: |
147456
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937831605.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
36AF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981013974.00000000036AF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
36AF000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568757908.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567074571.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
ABB000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000ABB000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
ABB000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930518727.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.949843518.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
217088
|
|
4FE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982035659.0000000004FE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FE0000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903280972.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978498782.0000000000B10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B10000
|
Size: |
12288
|
|
355F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025801326.000000000355F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
355F000
|
Size: |
4096
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.986537630.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
49152
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568101054.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979171157.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551180282.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
348F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020207000.000000000348F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
348F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938685139.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
A40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.975161883.0000000000A40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A40000
|
Size: |
8192
|
|
4FC0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026650147.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FC0000
|
Size: |
4096
|
|
B2D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943639983.0000000000B2D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B2D000
|
Size: |
53248
|
|
B3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979047218.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3B000
|
Size: |
12288
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940262731.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568732614.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B3C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939836101.0000000000B3C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3C000
|
Size: |
86016
|
|
482000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000001.00000000.944258106.0000000000482000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
482000
|
Size: |
1699840
|
|
474000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.0000000000474000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
474000
|
Size: |
36864
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568191154.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550770995.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
1DD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000001.00000002.1018919289.00000000001DD000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
1DD000
|
Size: |
4096
|
|
65FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982235490.00000000065FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
65FF000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567810520.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1522482579.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
192512
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938130279.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903173128.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
217088
|
|
482000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.0000000000482000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
482000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903488958.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
E90000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979936893.0000000000E90000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
E90000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.979122774.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.959368680.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
36DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025862975.00000000036DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
36DE000
|
Size: |
8192
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933565219.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
6236000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943185724.0000000006236000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6236000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936648831.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979364178.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
360E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020294756.000000000360E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
360E000
|
Size: |
8192
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.911405978.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550642883.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935799316.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933624439.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
324E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020115835.000000000324E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
324E000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568323617.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
409F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026143103.000000000409F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
409F000
|
Size: |
4096
|
|
834C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982353954.000000000834C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
834C000
|
Size: |
16384
|
|
4961000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.967761230.0000000004961000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4961000
|
Size: |
217088
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1527950956.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568073813.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551388699.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4980000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981837109.0000000004980000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4980000
|
Size: |
40960
|
|
1DF000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.00000000001DF000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1DF000
|
Size: |
1568768
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1542967121.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984601155.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
4FA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026614769.0000000004FA0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FA0000
|
Size: |
4096
|
|
1D6000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024637445.00000000001D6000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1D6000
|
Size: |
16384
|
|
4E1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026499737.0000000004E1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4E1E000
|
Size: |
8192
|
|
4F80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933755975.0000000004F80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F80000
|
Size: |
4096
|
|
30CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019969450.00000000030CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
30CF000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936334516.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
EFD000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025224861.0000000000EFD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
EFD000
|
Size: |
12288
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568048866.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
6750000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982288109.0000000006750000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6750000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940212040.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
280F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019679180.000000000280F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
280F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936715400.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567220777.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
424F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020885508.000000000424F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
424F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940285636.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935731501.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939025202.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
431F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026219216.000000000431F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
431F000
|
Size: |
4096
|
|
4FA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.981984239.0000000004FA0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FA0000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567784705.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
8110000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982308224.0000000008110000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
8110000
|
Size: |
8192
|
|
AC3000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.945138618.0000000000AC3000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AC3000
|
Size: |
36864
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936948949.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
45DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026340274.00000000045DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
45DE000
|
Size: |
8192
|
|
E6F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019643703.0000000000E6F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
E6F000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.981532602.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
AC4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978321038.0000000000AC4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AC4000
|
Size: |
32768
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940315547.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
40EE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981649818.00000000040EE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
40EE000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567757454.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4E10000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.933231012.0000000004E10000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4E10000
|
Size: |
53248
|
|
483000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1024982182.0000000000483000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
483000
|
Size: |
1679360
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937549296.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567589763.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
45AF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981745355.00000000045AF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
45AF000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936381182.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
1DD000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000001.00000000.944245759.00000000001DD000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
1DD000
|
Size: |
4096
|
|
115B000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.980012291.000000000115B000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
115B000
|
Size: |
122880
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1525730316.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
86FC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982430200.00000000086FC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
86FC000
|
Size: |
16384
|
|
4FF0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.982049038.0000000004FF0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FF0000
|
Size: |
4096
|
|
B3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939886313.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B3B000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938714416.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
133F000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.980656825.000000000133F000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
133F000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.978853847.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939125364.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936527603.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
3C0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020690398.0000000003C0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C0F000
|
Size: |
4096
|
|
2907000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019768400.0000000002907000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2907000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937306145.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
2CEF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980688278.0000000002CEF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2CEF000
|
Size: |
4096
|
|
2F6E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980738657.0000000002F6E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2F6E000
|
Size: |
8192
|
|
8718000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943781699.0000000008718000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
8718000
|
Size: |
12288
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937673084.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936558913.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
3F9D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026127465.0000000003F9D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F9D000
|
Size: |
12288
|
|
432F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981691198.000000000432F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
432F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937031436.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.978716887.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.902967189.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
65536
|
|
481F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026399420.000000000481F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
481F000
|
Size: |
4096
|
|
4FB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.981997283.0000000004FB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4FB0000
|
Size: |
4096
|
|
474000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1024719782.0000000000474000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
474000
|
Size: |
36864
|
|
B10000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944948602.0000000000B10000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B10000
|
Size: |
12288
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.976274283.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
AEF000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943797945.0000000000AEF000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AEF000
|
Size: |
118784
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938644222.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B14000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943797945.0000000000B14000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B14000
|
Size: |
8192
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1523395247.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
469000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018937291.0000000000469000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
469000
|
Size: |
40960
|
|
A30000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019441141.0000000000A30000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A30000
|
Size: |
4096
|
|
E91000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.897806000.0000000000E91000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
E91000
|
Size: |
188416
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936885339.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1550935837.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940339748.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567336669.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
3E6E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981575831.0000000003E6E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E6E000
|
Size: |
8192
|
|
306F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980756195.000000000306F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
306F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938967237.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.954044089.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.974470857.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548774795.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
B14000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943709840.0000000000B14000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B14000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.978992389.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
6235000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943119238.0000000006235000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6235000
|
Size: |
8192
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1524180775.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
A20000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019422405.0000000000A20000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
A20000
|
Size: |
4096
|
|
388E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020395281.000000000388E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
388E000
|
Size: |
8192
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.976364334.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
32DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025725811.00000000032DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
32DF000
|
Size: |
4096
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.951717600.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936188421.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
ABF000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.976079656.0000000000ABF000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
ABF000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.930418863.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4B70000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021396386.0000000004B70000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B70000
|
Size: |
4096
|
|
482F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981798563.000000000482F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
482F000
|
Size: |
4096
|
|
2A5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025446560.0000000002A5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2A5E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936833332.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4B00000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1021164867.0000000004B00000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B00000
|
Size: |
4096
|
|
369F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025843992.000000000369F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
369F000
|
Size: |
4096
|
|
B14000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944948602.0000000000B14000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B14000
|
Size: |
73728
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567565295.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567674138.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
435E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1026241651.000000000435E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
435E000
|
Size: |
8192
|
|
B3C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025127328.0000000000B3C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B3C000
|
Size: |
16384
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1546613177.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936284945.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1551125282.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
AEE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.978448045.0000000000AEE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AEE000
|
Size: |
4096
|
|
2E8E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019914187.0000000002E8E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E8E000
|
Size: |
8192
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935700216.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
28F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.950860282.00000000028F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28F0000
|
Size: |
53248
|
|
356F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980935546.000000000356F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
356F000
|
Size: |
4096
|
|
392F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981120982.000000000392F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
392F000
|
Size: |
4096
|
|
4A9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1021099621.0000000004A9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A9F000
|
Size: |
4096
|
|
171000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.948770204.0000000000171000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
171000
|
Size: |
188416
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567510420.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935867148.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.927621190.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
446F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981719189.000000000446F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
446F000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935946070.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
391F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025929845.000000000391F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
391F000
|
Size: |
4096
|
|
4F80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026557905.0000000004F80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F80000
|
Size: |
4096
|
|
BC0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025164900.0000000000BC0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BC0000
|
Size: |
16384
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.976326477.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936358351.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568806802.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
44D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1021042537.00000000044D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D0000
|
Size: |
4096
|
|
C70000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019582498.0000000000C70000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C70000
|
Size: |
32768
|
|
499E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1021077600.000000000499E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
499E000
|
Size: |
8192
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548666687.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.981468659.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
49152
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935897432.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.971627987.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
3BEE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981293459.0000000003BEE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3BEE000
|
Size: |
8192
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567265549.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
6CB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.973972405.00000000006CB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6CB000
|
Size: |
20480
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940158625.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4E45000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.984347300.0000000004E45000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4E45000
|
Size: |
12288
|
|
45D0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000001.00000003.949693336.00000000045D0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
45D0000
|
Size: |
163840
|
|
BA0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025144802.0000000000BA0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
BA0000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568611361.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943869094.0000000000B17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B17000
|
Size: |
61440
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1546394052.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
6D71000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943067523.0000000006D71000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6D71000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567729307.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939629168.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936785358.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
171000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000001.00000000.944215801.0000000000171000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
171000
|
Size: |
188416
|
|
B53000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939871821.0000000000B53000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B53000
|
Size: |
36864
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000001.00000003.976237062.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
288E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019717101.000000000288E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
288E000
|
Size: |
8192
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.939166262.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4DE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.983419386.0000000004DE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4DE0000
|
Size: |
53248
|
|
AF0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.944595261.0000000000AF0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
AF0000
|
Size: |
114688
|
|
F60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.978372151.0000000000F60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
F60000
|
Size: |
53248
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938576490.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F30000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984764996.0000000004F30000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F30000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568543102.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938038914.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933538556.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
8192
|
|
871B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.943609440.000000000871B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
871B000
|
Size: |
155648
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936080015.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.907661430.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
31EE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.980794058.00000000031EE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31EE000
|
Size: |
8192
|
|
8114000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982308224.0000000008114000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
8114000
|
Size: |
4096
|
|
5010000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1026748740.0000000005010000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5010000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936201899.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1546492515.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
49152
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568348307.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938800251.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1567700339.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.936216579.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.903238939.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1566896698.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4F60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984664657.0000000004F60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
2E4F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019894853.0000000002E4F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E4F000
|
Size: |
4096
|
|
2B0F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019825441.0000000002B0F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2B0F000
|
Size: |
4096
|
|
6BC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1019384512.00000000006BC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6BC000
|
Size: |
16384
|
|
4AD0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548835548.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AD0000
|
Size: |
4096
|
|
482000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000B.00000000.1517648944.0000000000482000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
11
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
482000
|
Size: |
1699840
|
|
4970000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.906914775.0000000004970000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4970000
|
Size: |
53248
|
|
4F50000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.984748592.0000000004F50000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F50000
|
Size: |
4096
|
|
1D6000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000002.1018856608.00000000001D6000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
1D6000
|
Size: |
16384
|
|
4AE0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000B.00000003.1548794711.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AE0000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938251836.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4AB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000001.00000003.979564936.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4AB0000
|
Size: |
4096
|
|
50B4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.982162494.00000000050B4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
50B4000
|
Size: |
12288
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940111942.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933704767.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940240130.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
B94000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.935766758.0000000000B94000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
B94000
|
Size: |
4096
|
|
3BAF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981272531.0000000003BAF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3BAF000
|
Size: |
4096
|
|
4F90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.933686731.0000000004F90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4F90000
|
Size: |
4096
|
|
3A6F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981195154.0000000003A6F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A6F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.940063133.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937739102.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
438F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020945462.000000000438F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
438F000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.937008994.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
44D1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1568162906.00000000044D1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
44D1000
|
Size: |
4096
|
|
4981000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.938473362.0000000004981000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4981000
|
Size: |
4096
|
|
E40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.979647689.0000000000E40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
E40000
|
Size: |
20480
|
|
436E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.981704068.000000000436E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
436E000
|
Size: |
8192
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1545679499.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
2850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.1527226514.0000000002850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
2850000
|
Size: |
53248
|
|
319F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1025678943.000000000319F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
319F000
|
Size: |
4096
|
|
384F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000001.00000002.1020376377.000000000384F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
1
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
384F000
|
Size: |
4096
|
|