4850000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000000.00000003.1227824181.0000000004850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4850000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Found malware configuration |
AV Detection |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
Sample uses string decryption to hide its real strings |
AV Detection |
|
|
BF1000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000002.00000002.1297857996.0000000000BF1000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
BF1000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
53E0000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
00000002.00000003.1257661877.00000000053E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
53E0000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
4A30000
|
direct allocation
|
page read and write
|
 |
|
|
Name: |
0000000A.00000003.1763027264.0000000004A30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4A30000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
631000
|
unkown
|
page execute and read and write
|
 |
|
|
Name: |
00000000.00000002.1268903433.0000000000631000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
631000
|
Size: |
409600
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
Yara detected Amadeys Clipper DLL |
Stealing of Sensitive Information |
|
Contains functionality to start a terminal service |
Remote Access Functionality |
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1240954227.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
3E1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299238755.0000000003E1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3E1E000
|
Size: |
8192
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1257984835.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1253825978.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
4A30000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271754213.0000000004A30000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A30000
|
Size: |
4096
|
|
5520000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258118749.0000000005520000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5520000
|
Size: |
4096
|
|
283F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270535613.000000000283F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
283F000
|
Size: |
4096
|
|
11B0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298446294.00000000011B0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
11B0000
|
Size: |
4096
|
|
C5D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000002.1297928624.0000000000C5D000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
C5D000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1254711082.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
4F61000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252353666.0000000004F61000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4F61000
|
Size: |
49152
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782160114.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4E5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299771872.0000000004E5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4E5E000
|
Size: |
8192
|
|
C5D000
|
unkown
|
page write copy
|
|
|
|
Name: |
0000000A.00000000.1753374251.0000000000C5D000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
C5D000
|
Size: |
4096
|
|
48B5000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1227824181.00000000048B5000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
48B5000
|
Size: |
12288
|
|
4A60000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271812535.0000000004A60000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A60000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765312047.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224942985.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758232247.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
34FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270919623.00000000034FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
34FE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1222839506.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
49152
|
|
4A9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299654494.0000000004A9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A9E000
|
Size: |
8192
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1254056136.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1759934051.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763358699.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
E4E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270440895.0000000000E4E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
E4E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230400194.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781841790.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D0A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0A000
|
Size: |
24576
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230048221.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
365F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298875256.000000000365F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
365F000
|
Size: |
4096
|
|
4BA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763474374.0000000004BA0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BA0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230722783.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4A80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271845665.0000000004A80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A80000
|
Size: |
4096
|
|
41DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299365846.00000000041DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41DE000
|
Size: |
8192
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226031598.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
C2E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270089926.0000000000C2E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
C2E000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765447272.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256747482.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224281963.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270369743.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
40960
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234418860.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781754163.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
2D7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270702078.0000000002D7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D7E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231655715.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765385131.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758214806.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
3F1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299260863.0000000003F1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F1F000
|
Size: |
4096
|
|
F0A000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1298239308.0000000000F0A000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
F0A000
|
Size: |
1695744
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237193819.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
541E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299842328.000000000541E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
541E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230534690.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782825302.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782078563.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765764205.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
3DDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299215646.0000000003DDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3DDF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231154449.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1761346010.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
49A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228260840.00000000049A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49A0000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1760563621.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242030100.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234571357.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4A30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762661709.0000000004A30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4A30000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782111291.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763340204.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
CAE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247633508.0000000000CAE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CAE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232938930.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765613762.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
BF1000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.1247044810.0000000000BF1000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
BF1000
|
Size: |
188416
|
|
C7F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000C7F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C7F000
|
Size: |
98304
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235021907.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224038538.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
2BFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270643305.0000000002BFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2BFF000
|
Size: |
4096
|
|
4800000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224619058.0000000004800000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
4800000
|
Size: |
176128
|
|
4A00000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271699743.0000000004A00000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A00000
|
Size: |
4096
|
|
CB2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270260235.0000000000CB2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CB2000
|
Size: |
86016
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223345240.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
31D7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298731649.00000000031D7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
31D7000
|
Size: |
12288
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763247590.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781269619.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765856357.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247144842.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
40960
|
|
5580000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300113989.0000000005580000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5580000
|
Size: |
4096
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
40960
|
|
38DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298964711.00000000038DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
38DF000
|
Size: |
4096
|
|
3CDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299131676.0000000003CDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3CDE000
|
Size: |
8192
|
|
6211000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246807590.0000000006211000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6211000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781294264.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256726718.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1224520814.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781941699.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782061668.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763376361.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782701199.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
C30000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270109579.0000000000C30000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C30000
|
Size: |
4096
|
|
53A0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1254390390.00000000053A0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
53A0000
|
Size: |
180224
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256158490.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781858000.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4820000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271457532.0000000004820000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4820000
|
Size: |
8192
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782872393.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
D2A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242187103.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D2A000
|
Size: |
4096
|
|
3A1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299021351.0000000003A1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A1F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781365644.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232184493.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234185850.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765279308.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
CB0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247598239.0000000000CB0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CB0000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758086607.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
49152
|
|
CB2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247598239.0000000000CB2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CB2000
|
Size: |
86016
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232326400.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
157E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298503138.000000000157E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
157E000
|
Size: |
8192
|
|
15C0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298539994.00000000015C0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
15C0000
|
Size: |
16384
|
|
3C9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299111888.0000000003C9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C9F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237023454.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4D1E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299734533.0000000004D1E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4D1E000
|
Size: |
8192
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1759051118.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
3D7F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271191110.0000000003D7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3D7F000
|
Size: |
4096
|
|
355E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298856819.000000000355E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
355E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230870576.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
19CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298691364.00000000019CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
19CE000
|
Size: |
8192
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258005400.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
5E25000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246905102.0000000005E25000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5E25000
|
Size: |
8192
|
|
3B5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299066344.0000000003B5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B5F000
|
Size: |
4096
|
|
42DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299389047.00000000042DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
42DF000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763432526.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
313E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270809588.000000000313E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
313E000
|
Size: |
8192
|
|
488E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271591586.000000000488E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
488E000
|
Size: |
8192
|
|
CF2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000CF2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CF2000
|
Size: |
57344
|
|
445E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299447680.000000000445E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
445E000
|
Size: |
8192
|
|
F09000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000F09000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
F09000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1766064402.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1766011300.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781672145.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235617914.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765661435.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228148980.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
BF0000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1297839082.0000000000BF0000.00000004.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
BF0000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1259974231.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235546571.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
CCE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270280855.0000000000CCE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CCE000
|
Size: |
8192
|
|
4A50000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271794336.0000000004A50000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A50000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231482646.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252744838.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781390361.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1240654419.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
12288
|
|
39BF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271068435.00000000039BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
39BF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230009289.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
49152
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782045073.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1253585480.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782776384.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
69F000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.000000000069F000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
69F000
|
Size: |
1597440
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256704349.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
4A95000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1763027264.0000000004A95000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4A95000
|
Size: |
12288
|
|
1EA000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268624797.00000000001EA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
1EA000
|
Size: |
24576
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233158697.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782194686.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4F5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299792812.0000000004F5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4F5F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781874194.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252458136.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
530000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268664188.0000000000530000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
530000
|
Size: |
8192
|
|
D2C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237713723.0000000000D2C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D2C000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781718026.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758179000.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763394249.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233192607.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1257950242.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233444380.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
441F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299428386.000000000441F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
441F000
|
Size: |
4096
|
|
CD0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000CD0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CD0000
|
Size: |
106496
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782268926.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
33DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298796893.00000000033DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
33DF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231763171.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758137997.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228118735.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
5530000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258135852.0000000005530000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5530000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765169609.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
49152
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763308520.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
49F0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271679861.00000000049F0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49F0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1236946849.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782176230.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D0A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247144842.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0A000
|
Size: |
24576
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781825085.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765891708.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234982431.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225782926.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241293641.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765554958.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
55E0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300271614.00000000055E0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55E0000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226769106.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
D05000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247188329.0000000000D05000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D05000
|
Size: |
12288
|
|
6353000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272021441.0000000006353000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6353000
|
Size: |
4096
|
|
55D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300251794.00000000055D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55D0000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226521762.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765425486.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781957439.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765721237.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241867172.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781770075.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
827000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.0000000000827000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
827000
|
Size: |
892928
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241998569.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1257896329.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
8192
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1761090121.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
949000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.1217328260.0000000000949000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
949000
|
Size: |
1716224
|
|
D2C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1239062385.0000000000D2C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D2C000
|
Size: |
49152
|
|
31B0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1257560769.00000000031B0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
31B0000
|
Size: |
53248
|
|
427F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271345653.000000000427F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
427F000
|
Size: |
4096
|
|
405F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299311788.000000000405F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
405F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234680764.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781602106.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4B90000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763455710.0000000004B90000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B90000
|
Size: |
4096
|
|
337F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270865788.000000000337F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
337F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762127842.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230761329.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258050783.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781618647.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781472242.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252415802.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
431E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299408625.000000000431E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
431E000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782144181.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765333891.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231344218.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226840853.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
237568
|
|
417E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271323205.000000000417E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
417E000
|
Size: |
8192
|
|
38BE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271050301.00000000038BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
38BE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233781383.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4F61000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256528861.0000000004F61000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4F61000
|
Size: |
241664
|
|
491F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299597231.000000000491F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
491F000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782896914.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
D17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1239062385.0000000000D17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D17000
|
Size: |
81920
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252476755.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782284935.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
42BE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271365372.00000000042BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
42BE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231864620.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D06000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000D06000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D06000
|
Size: |
8192
|
|
3B9E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299089220.0000000003B9E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B9E000
|
Size: |
8192
|
|
93B000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.000000000093B000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
93B000
|
Size: |
36864
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256580365.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
419F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299346304.000000000419F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
419F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235496223.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
373F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270993314.000000000373F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
373F000
|
Size: |
4096
|
|
2C3E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270660620.0000000002C3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2C3E000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782014151.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763413662.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
49E0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1760018758.00000000049E0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
49E0000
|
Size: |
163840
|
|
CF2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000CF2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CF2000
|
Size: |
57344
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765465919.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
30FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270792126.00000000030FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
30FF000
|
Size: |
4096
|
|
D02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000D02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D02000
|
Size: |
12288
|
|
EF3000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000EF3000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
EF3000
|
Size: |
28672
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1766042324.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232903651.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781981019.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781640538.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
1590000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298539994.0000000001590000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1590000
|
Size: |
32768
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230508601.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
459E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299484985.000000000459E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
459E000
|
Size: |
8192
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1759495744.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765928691.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230140354.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4B80000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763493529.0000000004B80000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4B80000
|
Size: |
4096
|
|
4BDE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299695346.0000000004BDE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4BDE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233299133.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
3B3E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271133277.0000000003B3E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3B3E000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781926505.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
37DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298942233.00000000037DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
37DE000
|
Size: |
8192
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1255555159.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
43C0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271413180.00000000043C0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C0000
|
Size: |
36864
|
|
813C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272309950.000000000813C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
813C000
|
Size: |
16384
|
|
43BF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271390050.00000000043BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
43BF000
|
Size: |
4096
|
|
610000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268813305.0000000000610000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
610000
|
Size: |
4096
|
|
34BF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270902023.00000000034BF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
34BF000
|
Size: |
4096
|
|
49C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228243905.00000000049C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49C0000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765579443.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765910343.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765745785.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241410114.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
3FFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271264432.0000000003FFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3FFF000
|
Size: |
4096
|
|
3C7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271172498.0000000003C7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C7E000
|
Size: |
8192
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228211747.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256772794.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
616F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271959784.000000000616F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
616F000
|
Size: |
4096
|
|
49B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228230408.00000000049B0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49B0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241937785.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1761858814.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
C5D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000002.00000000.1247098825.0000000000C5D000.00000008.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
C5D000
|
Size: |
4096
|
|
BEF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270072029.0000000000BEF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
BEF000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765873779.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
341E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298817351.000000000341E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
341E000
|
Size: |
8192
|
|
287E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270557122.000000000287E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
287E000
|
Size: |
8192
|
|
379F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298919387.000000000379F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
379F000
|
Size: |
4096
|
|
5550000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1299967653.0000000005550000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5550000
|
Size: |
4096
|
|
18CF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298672543.00000000018CF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
18CF000
|
Size: |
4096
|
|
46DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299526399.00000000046DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
46DE000
|
Size: |
8192
|
|
31B0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1257314733.00000000031B0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
31B0000
|
Size: |
53248
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258095400.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765596623.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234654706.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
40960
|
|
D06000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247527600.0000000000D06000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D06000
|
Size: |
8192
|
|
3AFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271113791.0000000003AFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3AFF000
|
Size: |
4096
|
|
D1C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000D1C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D1C000
|
Size: |
143360
|
|
43D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271413180.00000000043D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43D0000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234213594.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230365478.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231455560.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252397790.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
3F5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299286484.0000000003F5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3F5E000
|
Size: |
8192
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228133659.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237502875.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782319708.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241806745.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228178448.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
3A5E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299044942.0000000003A5E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3A5E000
|
Size: |
8192
|
|
4A70000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271829048.0000000004A70000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A70000
|
Size: |
4096
|
|
D0A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247527600.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0A000
|
Size: |
24576
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762052402.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
113C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298403989.000000000113C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
113C000
|
Size: |
16384
|
|
CF2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270328194.0000000000CF2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CF2000
|
Size: |
57344
|
|
26F7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270479168.00000000026F7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
26F7000
|
Size: |
32768
|
|
11A0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298427027.00000000011A0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
11A0000
|
Size: |
4096
|
|
605000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268729575.0000000000605000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
605000
|
Size: |
8192
|
|
39FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271088797.00000000039FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
39FE000
|
Size: |
8192
|
|
153E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298484621.000000000153E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
153E000
|
Size: |
8192
|
|
35FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270953193.00000000035FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
35FF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230835575.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
C50000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000C50000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C50000
|
Size: |
36864
|
|
450000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268643442.0000000000450000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
450000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782726787.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
CEE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247825902.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CEE000
|
Size: |
12288
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241967759.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
49E0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271659407.00000000049E0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49E0000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235679901.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782094772.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D0E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1240654419.0000000000D0E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0E000
|
Size: |
8192
|
|
55B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300204847.00000000055B0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55B0000
|
Size: |
4096
|
|
D1C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247527600.0000000000D1C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D1C000
|
Size: |
143360
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226898095.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
495E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299616618.000000000495E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
495E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232230679.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000D02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D02000
|
Size: |
24576
|
|
69D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.1269080060.000000000069D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
69D000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235576821.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
297F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270574827.000000000297F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
297F000
|
Size: |
4096
|
|
CA2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CA2000
|
Size: |
57344
|
|
4A20000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271735283.0000000004A20000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A20000
|
Size: |
4096
|
|
3DBE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271207531.0000000003DBE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3DBE000
|
Size: |
8192
|
|
2ABF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270608825.0000000002ABF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2ABF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230894872.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
31AE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298710151.00000000031AE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
31AE000
|
Size: |
8192
|
|
AE8000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1270032860.0000000000AE8000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
AE8000
|
Size: |
8192
|
|
159E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298539994.000000000159E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
159E000
|
Size: |
135168
|
|
10AA000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000002.1298383825.00000000010AA000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
10AA000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234502677.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
2AFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270626645.0000000002AFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2AFE000
|
Size: |
8192
|
|
10A8000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1298365585.00000000010A8000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
10A8000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234057218.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765803372.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
EC4000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000EC4000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
EC4000
|
Size: |
122880
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782848656.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781734999.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1259998580.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
29BE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270591860.00000000029BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
29BE000
|
Size: |
8192
|
|
6170000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271981047.0000000006170000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6170000
|
Size: |
4096
|
|
26EF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270459997.00000000026EF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
26EF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233815194.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
DE7000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000DE7000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
DE7000
|
Size: |
892928
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the Windows Explorer process (often used for injection) |
HIPS / PFW / Operating System Protection Evasion |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
4A10000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271715669.0000000004A10000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A10000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252993779.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231399812.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241329130.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234733788.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233271692.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D1C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247144842.0000000000D1C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D1C000
|
Size: |
143360
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762014005.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
221184
|
|
369E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298894431.000000000369E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
369E000
|
Size: |
8192
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782627911.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758612326.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
377E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271010957.000000000377E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
377E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230802076.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230972395.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247648438.0000000000D02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D02000
|
Size: |
12288
|
|
D1C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270369743.0000000000D1C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D1C000
|
Size: |
143360
|
|
D0A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270369743.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0A000
|
Size: |
24576
|
|
4B9F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299676203.0000000004B9F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4B9F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765820292.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231429827.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
C5A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000C5A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C5A000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226928402.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
696000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1268903433.0000000000696000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
696000
|
Size: |
16384
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000002.00000000.1247018772.0000000000BF0000.00000002.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
BF0000
|
Size: |
4096
|
|
C5E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C5E000
|
Size: |
131072
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781582455.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258074350.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
D01000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270328194.0000000000D01000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D01000
|
Size: |
16384
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781807028.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1227719316.0000000004850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4850000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230687988.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4F60000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299810448.0000000004F60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4F60000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226281430.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765485963.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223577266.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781410864.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4A5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299636926.0000000004A5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4A5F000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228082963.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
26F0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270479168.00000000026F0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
26F0000
|
Size: |
20480
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232152264.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D11000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247527600.0000000000D11000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D11000
|
Size: |
40960
|
|
2E7F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270720598.0000000002E7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2E7F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231796890.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782335650.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
3EBF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271226876.0000000003EBF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3EBF000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235096285.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D17000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237713723.0000000000D17000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D17000
|
Size: |
57344
|
|
6220000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246923158.0000000006220000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6220000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231313669.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765990233.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
2D3F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270680940.0000000002D3F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2D3F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782216659.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D03000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237933901.0000000000D03000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D03000
|
Size: |
81920
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235160939.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230919265.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230648656.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
630000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268838814.0000000000630000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
630000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765531898.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231691462.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
387F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271032048.000000000387F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
387F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233231181.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4E1F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299753598.0000000004E1F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4E1F000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1759715385.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256807083.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
BF1000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000000.1753339573.0000000000BF1000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
BF1000
|
Size: |
188416
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233927789.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
2EBE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270740637.0000000002EBE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2EBE000
|
Size: |
8192
|
|
CC7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000CC7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CC7000
|
Size: |
143360
|
|
403E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271282882.000000000403E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
403E000
|
Size: |
8192
|
|
6701000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1243189675.0000000006701000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6701000
|
Size: |
262144
|
|
CD7000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270300101.0000000000CD7000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CD7000
|
Size: |
77824
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1238368995.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
602F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271919961.000000000602F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
602F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231576362.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1257918596.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782127551.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235408175.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1760840116.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233527328.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252492929.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228195729.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
803B000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272267823.000000000803B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
803B000
|
Size: |
20480
|
|
630000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.1217251058.0000000000630000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
630000
|
Size: |
4096
|
|
5E20000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246960588.0000000005E20000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5E20000
|
Size: |
8192
|
|
65CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272165492.00000000065CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
65CE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231533808.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782751728.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1254978432.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233056845.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228065084.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
4096
|
|
6700000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272195882.0000000006700000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6700000
|
Size: |
106496
|
|
CEE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CEE000
|
Size: |
12288
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1255833703.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234841969.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765365120.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782249341.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758159101.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
55A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300184265.00000000055A0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55A0000
|
Size: |
4096
|
|
D0A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247363794.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D0A000
|
Size: |
24576
|
|
363E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270975208.000000000363E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
363E000
|
Size: |
8192
|
|
4A30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762920872.0000000004A30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4A30000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241758469.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233371177.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762158132.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
C5F000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000C5F000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
C5F000
|
Size: |
1597440
|
|
5540000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258024284.0000000005540000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5540000
|
Size: |
4096
|
|
33BE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270884067.00000000033BE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
33BE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231508320.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
2FFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270775291.0000000002FFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2FFE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230441610.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
6350000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272021441.0000000006350000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6350000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758196406.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
949000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.0000000000949000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
949000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765948156.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223096920.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
EB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268600677.00000000000EB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
EB000
|
Size: |
20480
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781429517.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1254300841.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242064941.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1226966551.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5DE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268702116.00000000005DE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5DE000
|
Size: |
8192
|
|
F09000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000002.00000000.1247122870.0000000000F09000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
F09000
|
Size: |
1716224
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235341409.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1256420560.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765838435.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
47DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299547599.00000000047DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
47DF000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782233048.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765407278.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232718283.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781452500.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
323F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270830868.000000000323F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
323F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230559296.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241900862.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233643867.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781997782.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782472305.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
409E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299329021.000000000409E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
409E000
|
Size: |
8192
|
|
7F5F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272228325.0000000007F5F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
7F5F000
|
Size: |
4096
|
|
391E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298990954.000000000391E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
391E000
|
Size: |
8192
|
|
5DAE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271864258.0000000005DAE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5DAE000
|
Size: |
8192
|
|
606E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271938078.000000000606E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
606E000
|
Size: |
8192
|
|
3C3F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271154629.0000000003C3F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3C3F000
|
Size: |
4096
|
|
455F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299466590.000000000455F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
455F000
|
Size: |
4096
|
|
1580000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298520537.0000000001580000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1580000
|
Size: |
4096
|
|
658C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272135182.000000000658C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
658C000
|
Size: |
16384
|
|
55C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300228731.00000000055C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55C0000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1759270687.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235247008.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
32DF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298775808.00000000032DF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
32DF000
|
Size: |
4096
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1225507609.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|
5F2F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271902708.0000000005F2F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5F2F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234905701.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
F09000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
0000000A.00000000.1753392841.0000000000F09000.00000080.00000001.01000000.00000007.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
F09000
|
Size: |
1716224
|
|
5E26000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246960588.0000000005E26000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
5E26000
|
Size: |
4096
|
|
904000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.0000000000904000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
904000
|
Size: |
122880
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
Name: |
0000000A.00000000.1753322007.0000000000BF0000.00000002.00000001.01000000.00000007.sdmp
|
TargetID: |
10
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
BF0000
|
Size: |
4096
|
|
C56000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297857996.0000000000C56000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
C56000
|
Size: |
16384
|
|
600000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268729575.0000000000600000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
600000
|
Size: |
16384
|
|
2FBF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270758085.0000000002FBF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
2FBF000
|
Size: |
4096
|
|
31D0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298731649.00000000031D0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
31D0000
|
Size: |
16384
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230294176.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782446739.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231614444.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232112139.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232998188.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
AEA000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.1270051476.0000000000AEA000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
AEA000
|
Size: |
8192
|
|
4F61000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1259924067.0000000004F61000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4F61000
|
Size: |
49152
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765786305.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
327E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270848238.000000000327E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
327E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231243007.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
D2F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1240419884.0000000000D2F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D2F000
|
Size: |
36864
|
|
55F0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300291739.00000000055F0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
55F0000
|
Size: |
4096
|
|
498F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271634328.000000000498F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
498F000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781698036.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235062889.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1237340759.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234031510.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758247667.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
94A000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000002.1269903572.000000000094A000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
94A000
|
Size: |
1695744
|
|
16CE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298631971.00000000016CE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
16CE000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762070405.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
3EFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271244501.0000000003EFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
3EFE000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762108047.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
351F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298839600.000000000351F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
351F000
|
Size: |
4096
|
|
413F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271303749.000000000413F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
413F000
|
Size: |
4096
|
|
5570000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300076992.0000000005570000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5570000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231370641.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1255257807.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
6210000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246923158.0000000006210000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6210000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782503769.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
5DEE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271885675.0000000005DEE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
5DEE000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242094113.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782599546.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782029316.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
D1C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000D1C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D1C000
|
Size: |
143360
|
|
4CDF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299715371.0000000004CDF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4CDF000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782301030.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782800146.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
551F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299913408.000000000551F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
551F000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1230334745.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782677814.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
D15000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1240638609.0000000000D15000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D15000
|
Size: |
8192
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781890225.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
481E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299570163.000000000481E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
481E000
|
Size: |
8192
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1232297668.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
6220000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246807590.0000000006220000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
6220000
|
Size: |
8192
|
|
621E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1246807590.000000000621E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
621E000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234876409.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
69D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000000.1217307828.000000000069D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
69D000
|
Size: |
4096
|
|
273B000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270517820.000000000273B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
273B000
|
Size: |
20480
|
|
5560000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1299997656.0000000005560000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5560000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1762088338.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
469F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1299507986.000000000469F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
469F000
|
Size: |
4096
|
|
16F0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298651102.00000000016F0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F0000
|
Size: |
16384
|
|
49D0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000003.1228041115.00000000049D0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
49D0000
|
Size: |
8192
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252437769.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1234812579.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
5445000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1257661877.0000000005445000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
5445000
|
Size: |
12288
|
|
D2C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242187103.0000000000D2C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D2C000
|
Size: |
49152
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758831607.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
14FD000
|
stack
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298467259.00000000014FD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
14FD000
|
Size: |
12288
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1233864206.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782652834.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241188853.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781338998.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
16D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1253344807.00000000016D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
16D0000
|
Size: |
53248
|
|
45A1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1782407603.00000000045A1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
45A1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1760316602.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
4BB0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
0000000A.00000003.1763281605.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4BB0000
|
Size: |
4096
|
|
D01000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247825902.0000000000D01000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
D01000
|
Size: |
16384
|
|
CEE000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247006091.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CEE000
|
Size: |
12288
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231829181.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781521238.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1781911041.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
648B000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1272105367.000000000648B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
648B000
|
Size: |
20480
|
|
5590000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1300159392.0000000005590000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
5590000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765638528.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765697278.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1241836254.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4824000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1271457532.0000000004824000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
4824000
|
Size: |
12288
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252375480.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
4850000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1227463804.0000000004850000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4850000
|
Size: |
53248
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1235431423.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1758113278.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
4A40000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1271774147.0000000004A40000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
4A40000
|
Size: |
4096
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1242120474.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
C98000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1270132415.0000000000C98000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
C98000
|
Size: |
16384
|
|
43C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1231114565.00000000043C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
43C1000
|
Size: |
4096
|
|
4590000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1761618588.0000000004590000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
4590000
|
Size: |
53248
|
|
674000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000A.00000003.1765969692.0000000000674000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
10
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
674000
|
Size: |
4096
|
|
933000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000000.00000002.1269151253.0000000000933000.00000040.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
933000
|
Size: |
28672
|
|
159A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000002.1298539994.000000000159A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
159A000
|
Size: |
8192
|
|
631000
|
unkown
|
page execute and write copy
|
|
|
|
Name: |
00000000.00000000.1217267404.0000000000631000.00000080.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute and write copy
|
Base address: |
631000
|
Size: |
188416
|
|
CF2000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1247825902.0000000000CF2000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
CF2000
|
Size: |
57344
|
|
59E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.1268682714.000000000059E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
59E000
|
Size: |
8192
|
|
31C0000
|
direct allocation
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000003.1258155242.00000000031C0000.00000040.00001000.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page execute and read and write
|
Base address: |
31C0000
|
Size: |
4096
|
|
16F4000
|
heap
|
page read and write
|
|
|
|
Name: |
00000002.00000003.1252512963.00000000016F4000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
2
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
16F4000
|
Size: |
4096
|
|
EFB000
|
unkown
|
page execute and read and write
|
|
|
|
Name: |
00000002.00000002.1297950338.0000000000EFB000.00000040.00000001.01000000.00000007.sdmp
|
TargetID: |
2
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute and read and write
|
Base address: |
EFB000
|
Size: |
36864
|
|
620000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000003.1223810352.0000000000620000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
free memory
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
620000
|
Size: |
53248
|
|