C0001D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258006043.000000C0001D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001D0000
|
Size: |
4096
|
|
2507AF13000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519741399.000002507AF13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AF13000
|
Size: |
462848
|
|
2507AD20000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519118172.000002507AD20000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AD20000
|
Size: |
8192
|
|
2507BA30000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520709793.000002507BA30000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA30000
|
Size: |
53248
|
|
B7F55FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521335687.000000B7F55FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F55FF000
|
Size: |
4096
|
|
192FBAC0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430180301.00000192FBAC0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBAC0000
|
Size: |
4096
|
|
23E76FD0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522960853.0000023E76FD0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E76FD0000
|
Size: |
4096
|
|
411E07D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518995695.000000411E07D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E07D000
|
Size: |
12288
|
|
2507AF8E000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519879065.000002507AF8E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AF8E000
|
Size: |
172032
|
|
C00001B000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521702923.000000C00001B000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00001B000
|
Size: |
8192
|
|
23E7C4F5000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523334859.0000023E7C4F5000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7C4F5000
|
Size: |
4096
|
|
2507B902000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.301026877.000002507B902000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B902000
|
Size: |
131072
|
|
23E77075000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523040390.0000023E77075000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77075000
|
Size: |
28672
|
|
28D55BF4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258341197.0000028D55BF4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55BF4000
|
Size: |
4096
|
|
173A2813000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519084676.00000173A2813000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2813000
|
Size: |
65536
|
|
173A2918000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519518171.00000173A2918000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2918000
|
Size: |
20480
|
|
C0000E6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257327910.000000C0000E6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E6000
|
Size: |
4096
|
|
C00002A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521799740.000000C00002A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00002A000
|
Size: |
12288
|
|
C0000E2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522447682.000000C0000E2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E2000
|
Size: |
8192
|
|
C00019A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522777996.000000C00019A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00019A000
|
Size: |
4096
|
|
C0000DE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522439320.000000C0000DE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000DE000
|
Size: |
12288
|
|
C000100000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257420479.000000C000100000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000100000
|
Size: |
8192
|
|
173A2720000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518959993.00000173A2720000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2720000
|
Size: |
4096
|
|
C00008E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257191784.000000C00008E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00008E000
|
Size: |
4096
|
|
C0001C2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257901098.000000C0001C2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C2000
|
Size: |
4096
|
|
1FDB6C3B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319192242.000001FDB6C3B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C3B000
|
Size: |
4096
|
|
1FDB6C29000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319604737.000001FDB6C29000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C29000
|
Size: |
16384
|
|
2507B802000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520105207.000002507B802000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B802000
|
Size: |
4096
|
|
1FDB6C50000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319247982.000001FDB6C50000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C50000
|
Size: |
61440
|
|
28D5E9C000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.429964335.00000028D5E9C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D5E9C000
|
Size: |
16384
|
|
18A51A02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519185507.0000018A51A02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A02000
|
Size: |
65536
|
|
192FBC3E000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431008298.00000192FBC3E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC3E000
|
Size: |
12288
|
|
C0000AE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522368572.000000C0000AE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000AE000
|
Size: |
4096
|
|
C000002000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521398729.000000C000002000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000002000
|
Size: |
4096
|
|
C000184000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257451737.000000C000184000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000184000
|
Size: |
4096
|
|
28D55E50000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258551991.0000028D55E50000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E50000
|
Size: |
4096
|
|
743000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521028267.0000000000743000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
743000
|
Size: |
16384
|
|
C000014000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257035552.000000C000014000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000014000
|
Size: |
4096
|
|
C0001BA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257857626.000000C0001BA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001BA000
|
Size: |
4096
|
|
28D55B50000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258279692.0000028D55B50000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55B50000
|
Size: |
4096
|
|
1FDB6C4E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319116625.000001FDB6C4E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C4E000
|
Size: |
69632
|
|
DE8F1FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258156979.000000DE8F1FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8F1FE000
|
Size: |
8192
|
|
173A2858000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295472880.00000173A2858000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2858000
|
Size: |
4096
|
|
2507B96F000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520344663.000002507B96F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B96F000
|
Size: |
139264
|
|
C000014000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521620685.000000C000014000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000014000
|
Size: |
4096
|
|
23E7C4F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523323264.0000023E7C4F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7C4F0000
|
Size: |
12288
|
|
DE8F3FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258185261.000000DE8F3FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8F3FF000
|
Size: |
4096
|
|
C00011A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522559660.000000C00011A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00011A000
|
Size: |
16384
|
|
C00000C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521474361.000000C00000C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00000C000
|
Size: |
4096
|
|
2507AE43000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.298978817.000002507AE43000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE43000
|
Size: |
4096
|
|
C00018A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257464499.000000C00018A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018A000
|
Size: |
4096
|
|
28D63F9000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430131892.00000028D63F9000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D63F9000
|
Size: |
28672
|
|
C000084000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522190528.000000C000084000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000084000
|
Size: |
4096
|
|
DE8EBFD000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258093417.000000DE8EBFD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8EBFD000
|
Size: |
12288
|
|
C000112000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522552479.000000C000112000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000112000
|
Size: |
4096
|
|
B405FFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319455527.000000B405FFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405FFF000
|
Size: |
4096
|
|
252BBB00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519676973.00000252BBB00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BBB00000
|
Size: |
4096
|
|
1FDB6C6D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319707380.000001FDB6C6D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C6D000
|
Size: |
28672
|
|
28D55BF9000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258349389.0000028D55BF9000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55BF9000
|
Size: |
4096
|
|
C0001B0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522809784.000000C0001B0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B0000
|
Size: |
4096
|
|
1FDB6C75000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319743483.000001FDB6C75000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C75000
|
Size: |
8192
|
|
C0000F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522480452.000000C0000F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F0000
|
Size: |
4096
|
|
C000180000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257439534.000000C000180000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000180000
|
Size: |
4096
|
|
173A2880000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519438160.00000173A2880000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2880000
|
Size: |
4096
|
|
70E000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000002.520864902.000000000070E000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
70E000
|
Size: |
184320
|
|
18A51B02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519536833.0000018A51B02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51B02000
|
Size: |
32768
|
|
20C05A3F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518994804.0000020C05A3F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A3F000
|
Size: |
94208
|
|
CE29DFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518770035.000000CE29DFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CE29DFE000
|
Size: |
8192
|
|
C000244000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522932783.000000C000244000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000244000
|
Size: |
94208
|
|
20C05A28000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518919531.0000020C05A28000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A28000
|
Size: |
90112
|
|
1FDB6C13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319521030.000001FDB6C13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C13000
|
Size: |
86016
|
|
28D55E60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258565184.0000028D55E60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E60000
|
Size: |
12288
|
|
2507B900000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520112922.000002507B900000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B900000
|
Size: |
8192
|
|
2507BA23000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520658640.000002507BA23000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA23000
|
Size: |
8192
|
|
697087F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518892866.000000697087F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
697087F000
|
Size: |
4096
|
|
C000102000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522527078.000000C000102000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000102000
|
Size: |
4096
|
|
25FF123D000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519340655.0000025FF123D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF123D000
|
Size: |
65536
|
|
C0001B0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257644592.000000C0001B0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B0000
|
Size: |
4096
|
|
1FDB6C4B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319648969.000001FDB6C4B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C4B000
|
Size: |
12288
|
|
192FBC50000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431209872.00000192FBC50000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC50000
|
Size: |
4096
|
|
C000000000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256998965.000000C000000000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000000000
|
Size: |
4096
|
|
C000040000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521892865.000000C000040000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000040000
|
Size: |
4096
|
|
F635E7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518945662.000000F635E7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635E7D000
|
Size: |
12288
|
|
C000184000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522711362.000000C000184000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000184000
|
Size: |
4096
|
|
173A2710000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518943556.00000173A2710000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2710000
|
Size: |
4096
|
|
252BB013000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519135894.00000252BB013000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB013000
|
Size: |
86016
|
|
173A2858000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295304805.00000173A2858000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2858000
|
Size: |
4096
|
|
C0000E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257295600.000000C0000E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E0000
|
Size: |
4096
|
|
C00008F000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522277767.000000C00008F000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00008F000
|
Size: |
8192
|
|
1FDB6C67000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319076246.000001FDB6C67000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C67000
|
Size: |
4096
|
|
2507AD80000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519146449.000002507AD80000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AD80000
|
Size: |
8192
|
|
F635F7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518964346.000000F635F7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635F7E000
|
Size: |
8192
|
|
6970BFF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519007690.0000006970BFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6970BFF000
|
Size: |
4096
|
|
4FB000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000000.259860447.00000000004FB000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
4FB000
|
Size: |
2134016
|
|
23E7E020000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523363140.0000023E7E020000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7E020000
|
Size: |
4096
|
|
79E000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.256820104.000000000079E000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
79E000
|
Size: |
204800
|
|
1FDB6C61000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319100644.000001FDB6C61000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C61000
|
Size: |
8192
|
|
C000082000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522172565.000000C000082000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000082000
|
Size: |
4096
|
|
C000196000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257498366.000000C000196000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000196000
|
Size: |
4096
|
|
23E77255000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523097362.0000023E77255000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77255000
|
Size: |
8192
|
|
25FF1202000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519121411.0000025FF1202000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1202000
|
Size: |
65536
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521068259.000000000077C000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
77C000
|
Size: |
4096
|
|
C000094000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522307250.000000C000094000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000094000
|
Size: |
4096
|
|
C0000C6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522403119.000000C0000C6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000C6000
|
Size: |
4096
|
|
77D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000000.260518043.000000000077D000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
77D000
|
Size: |
4096
|
|
C000200000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522846241.000000C000200000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000200000
|
Size: |
94208
|
|
C000054000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522050182.000000C000054000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000054000
|
Size: |
73728
|
|
C00012A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522594152.000000C00012A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00012A000
|
Size: |
4096
|
|
F2535FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518942332.000000F2535FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F2535FE000
|
Size: |
8192
|
|
1FDB6C60000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319109032.000001FDB6C60000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C60000
|
Size: |
4096
|
|
C0001D4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258015734.000000C0001D4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001D4000
|
Size: |
8192
|
|
23E7C4FA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523344452.0000023E7C4FA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7C4FA000
|
Size: |
8192
|
|
1FDB6C7B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319057122.000001FDB6C7B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C7B000
|
Size: |
28672
|
|
1FDB6C2E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319617308.000001FDB6C2E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C2E000
|
Size: |
32768
|
|
C000008000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257010761.000000C000008000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000008000
|
Size: |
4096
|
|
192FC3C0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.434904133.00000192FC3C0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
192FC3C0000
|
Size: |
4096
|
|
C000088000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257132431.000000C000088000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000088000
|
Size: |
4096
|
|
28D55E65000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258585157.0000028D55E65000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E65000
|
Size: |
4096
|
|
252BB029000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519224385.00000252BB029000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB029000
|
Size: |
81920
|
|
C000188000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522724064.000000C000188000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000188000
|
Size: |
4096
|
|
C000000000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521380532.000000C000000000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000000000
|
Size: |
4096
|
|
4130C7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518843136.0000004130C7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4130C7D000
|
Size: |
12288
|
|
F635B7C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518854852.000000F635B7C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635B7C000
|
Size: |
16384
|
|
C0000EA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257341853.000000C0000EA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000EA000
|
Size: |
4096
|
|
C00018C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522736942.000000C00018C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018C000
|
Size: |
4096
|
|
252BB066000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519417462.00000252BB066000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB066000
|
Size: |
28672
|
|
18A51820000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519085708.0000018A51820000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51820000
|
Size: |
4096
|
|
C0001CC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257987248.000000C0001CC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001CC000
|
Size: |
4096
|
|
C0000CE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257273025.000000C0000CE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000CE000
|
Size: |
4096
|
|
80C000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256925716.000000000080C000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
80C000
|
Size: |
4096
|
|
6970CFE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519026676.0000006970CFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6970CFE000
|
Size: |
8192
|
|
C0001A0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257520866.000000C0001A0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001A0000
|
Size: |
36864
|
|
C00001C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257052078.000000C00001C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00001C000
|
Size: |
4096
|
|
23E77086000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000003.392230742.0000023E77086000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77086000
|
Size: |
32768
|
|
C000130000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522613822.000000C000130000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000130000
|
Size: |
24576
|
|
173A282A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519197452.00000173A282A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A282A000
|
Size: |
94208
|
|
411DD7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518954773.000000411DD7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411DD7D000
|
Size: |
12288
|
|
77E000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000000.260525996.000000000077E000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
77E000
|
Size: |
94208
|
|
192FBC29000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430825736.00000192FBC29000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC29000
|
Size: |
16384
|
|
1FDB6C41000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319213397.000001FDB6C41000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C41000
|
Size: |
16384
|
|
23E77260000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523110847.0000023E77260000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E77260000
|
Size: |
8192
|
|
1FDB6C64000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319085277.000001FDB6C64000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C64000
|
Size: |
12288
|
|
C000086000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522216228.000000C000086000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000086000
|
Size: |
4096
|
|
20C05A13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518820926.0000020C05A13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A13000
|
Size: |
81920
|
|
C00011F000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522568762.000000C00011F000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00011F000
|
Size: |
4096
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256893579.00000000007D3000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
7D3000
|
Size: |
16384
|
|
C00000E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257020273.000000C00000E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00000E000
|
Size: |
4096
|
|
F25347E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518888163.000000F25347E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25347E000
|
Size: |
8192
|
|
411E47F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519048301.000000411E47F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E47F000
|
Size: |
4096
|
|
C0000AA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522360655.000000C0000AA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000AA000
|
Size: |
12288
|
|
2507AE91000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519595226.000002507AE91000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE91000
|
Size: |
528384
|
|
C000218000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522875732.000000C000218000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000218000
|
Size: |
24576
|
|
411DAFB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518903828.000000411DAFB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411DAFB000
|
Size: |
20480
|
|
F63597F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518728731.000000F63597F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F63597F000
|
Size: |
4096
|
|
B7F51FA000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521296172.000000B7F51FA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F51FA000
|
Size: |
24576
|
|
18A51A5B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519442541.0000018A51A5B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A5B000
|
Size: |
40960
|
|
C000198000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522770916.000000C000198000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000198000
|
Size: |
4096
|
|
192FBC00000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430357907.00000192FBC00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC00000
|
Size: |
4096
|
|
173A2913000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519507027.00000173A2913000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2913000
|
Size: |
12288
|
|
252BB03E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519290741.00000252BB03E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB03E000
|
Size: |
159744
|
|
C0000A6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522352853.000000C0000A6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A6000
|
Size: |
12288
|
|
C000160000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522671111.000000C000160000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000160000
|
Size: |
110592
|
|
25FF1140000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
0000000C.00000003.301055558.0000025FF1140000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
25FF1140000
|
Size: |
4096
|
|
173A2780000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518972532.00000173A2780000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2780000
|
Size: |
8192
|
|
173A2848000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295290168.00000173A2848000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2848000
|
Size: |
4096
|
|
C0000F4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522494088.000000C0000F4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F4000
|
Size: |
4096
|
|
C0000D0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522423100.000000C0000D0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000D0000
|
Size: |
49152
|
|
2507AFE5000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520069511.000002507AFE5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AFE5000
|
Size: |
110592
|
|
28D55BF0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258326820.0000028D55BF0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55BF0000
|
Size: |
8192
|
|
C0001B4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522817964.000000C0001B4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B4000
|
Size: |
4096
|
|
F635AFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518777779.000000F635AFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635AFE000
|
Size: |
8192
|
|
C000080000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522160722.000000C000080000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000080000
|
Size: |
4096
|
|
173A4330000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295852066.00000173A4330000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
173A4330000
|
Size: |
4096
|
|
C0000FC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522508445.000000C0000FC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000FC000
|
Size: |
4096
|
|
C0000E6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522455713.000000C0000E6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E6000
|
Size: |
4096
|
|
2507B992000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520389921.000002507B992000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B992000
|
Size: |
122880
|
|
320000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000002.255147193.0000000000320000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
320000
|
Size: |
4096
|
|
252BAEE0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518985688.00000252BAEE0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BAEE0000
|
Size: |
4096
|
|
C0000F6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257363922.000000C0000F6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F6000
|
Size: |
4096
|
|
697097B000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518913051.000000697097B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
697097B000
|
Size: |
20480
|
|
1FDB6C68000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319068468.000001FDB6C68000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C68000
|
Size: |
12288
|
|
C0001C6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257936232.000000C0001C6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C6000
|
Size: |
4096
|
|
C0001AE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257636314.000000C0001AE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001AE000
|
Size: |
4096
|
|
6970D7F000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519050127.0000006970D7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6970D7F000
|
Size: |
4096
|
|
23E77269000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523129754.0000023E77269000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E77269000
|
Size: |
24576
|
|
23E76FE0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522969401.0000023E76FE0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E76FE0000
|
Size: |
4096
|
|
B7F4FFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521282099.000000B7F4FFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F4FFE000
|
Size: |
8192
|
|
77D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000002.521079482.000000000077D000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
77D000
|
Size: |
4096
|
|
C000025000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257068761.000000C000025000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000025000
|
Size: |
4096
|
|
28D55EA5000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258613857.0000028D55EA5000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55EA5000
|
Size: |
8192
|
|
C0000B2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522380947.000000C0000B2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B2000
|
Size: |
4096
|
|
192FBC52000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431218246.00000192FBC52000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC52000
|
Size: |
32768
|
|
1FDB73C0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319847544.000001FDB73C0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
1FDB73C0000
|
Size: |
4096
|
|
192FC402000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.435089054.00000192FC402000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
192FC402000
|
Size: |
4096
|
|
C0000C6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257262652.000000C0000C6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000C6000
|
Size: |
8192
|
|
C0001A8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522803154.000000C0001A8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001A8000
|
Size: |
4096
|
|
2507AE89000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519587067.000002507AE89000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE89000
|
Size: |
8192
|
|
192FBC2F000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430834939.00000192FBC2F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC2F000
|
Size: |
57344
|
|
C000228000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522890930.000000C000228000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000228000
|
Size: |
110592
|
|
28D55C40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258373480.0000028D55C40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55C40000
|
Size: |
40960
|
|
C000032000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521822467.000000C000032000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000032000
|
Size: |
4096
|
|
2507AE53000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519462725.000002507AE53000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE53000
|
Size: |
4096
|
|
173A27B0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518990969.00000173A27B0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
173A27B0000
|
Size: |
4096
|
|
C00009E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257222796.000000C00009E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00009E000
|
Size: |
4096
|
|
C000182000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257445353.000000C000182000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000182000
|
Size: |
4096
|
|
173A4402000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519559302.00000173A4402000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
173A4402000
|
Size: |
4096
|
|
1FDB6B20000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319473594.000001FDB6B20000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6B20000
|
Size: |
8192
|
|
1FDB6D02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319837424.000001FDB6D02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6D02000
|
Size: |
16384
|
|
6970AFA000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518974507.0000006970AFA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6970AFA000
|
Size: |
24576
|
|
20C05A76000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519217979.0000020C05A76000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A76000
|
Size: |
16384
|
|
20C05A02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518805918.0000020C05A02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A02000
|
Size: |
65536
|
|
C0001AC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257546618.000000C0001AC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001AC000
|
Size: |
4096
|
|
DE8EDFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258116767.000000DE8EDFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8EDFE000
|
Size: |
8192
|
|
252BB06E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519441706.00000252BB06E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB06E000
|
Size: |
98304
|
|
DE8F9FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258240363.000000DE8F9FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8F9FF000
|
Size: |
4096
|
|
C0000A0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257227652.000000C0000A0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A0000
|
Size: |
4096
|
|
C000086000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257126086.000000C000086000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000086000
|
Size: |
4096
|
|
291000
|
unkown
|
page execute read
|
|
|
|
Name: |
00000004.00000000.259423743.0000000000291000.00000020.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute read
|
Base address: |
291000
|
Size: |
2531328
|
|
192FBC13000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430562899.00000192FBC13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC13000
|
Size: |
86016
|
|
C00019A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257508427.000000C00019A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00019A000
|
Size: |
4096
|
|
C0000EE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522471120.000000C0000EE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000EE000
|
Size: |
4096
|
|
F25377E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518987124.000000F25377E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25377E000
|
Size: |
8192
|
|
2507AE6F000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519523283.000002507AE6F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE6F000
|
Size: |
4096
|
|
778000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521055396.0000000000778000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
778000
|
Size: |
8192
|
|
C000002000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257004156.000000C000002000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000002000
|
Size: |
4096
|
|
18A51A77000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519505613.0000018A51A77000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A77000
|
Size: |
12288
|
|
C0000B6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522387640.000000C0000B6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B6000
|
Size: |
4096
|
|
20C05A7B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519240517.0000020C05A7B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A7B000
|
Size: |
20480
|
|
411DF7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518974985.000000411DF7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411DF7D000
|
Size: |
12288
|
|
C000125000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522586034.000000C000125000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000125000
|
Size: |
12288
|
|
C0000F6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522499939.000000C0000F6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F6000
|
Size: |
4096
|
|
C0000B8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257253624.000000C0000B8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B8000
|
Size: |
4096
|
|
20C05A6B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519177610.0000020C05A6B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A6B000
|
Size: |
28672
|
|
2507BA13000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520602806.000002507BA13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA13000
|
Size: |
61440
|
|
1FDB6AB0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319460381.000001FDB6AB0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6AB0000
|
Size: |
4096
|
|
B7F4DFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521268286.000000B7F4DFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F4DFE000
|
Size: |
8192
|
|
C00009A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257217274.000000C00009A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00009A000
|
Size: |
12288
|
|
18A51A8C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519526305.0000018A51A8C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A8C000
|
Size: |
12288
|
|
173A2800000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519023661.00000173A2800000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2800000
|
Size: |
73728
|
|
C000190000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257481016.000000C000190000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000190000
|
Size: |
4096
|
|
C000030000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521813572.000000C000030000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000030000
|
Size: |
4096
|
|
C0000C8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522408903.000000C0000C8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000C8000
|
Size: |
4096
|
|
18A51A6C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519471137.0000018A51A6C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A6C000
|
Size: |
32768
|
|
18A51B13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519557846.0000018A51B13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51B13000
|
Size: |
4096
|
|
173A2902000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519477127.00000173A2902000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2902000
|
Size: |
49152
|
|
C000194000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257494201.000000C000194000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000194000
|
Size: |
4096
|
|
20C06202000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519335235.0000020C06202000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
20C06202000
|
Size: |
4096
|
|
25FF1010000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519056938.0000025FF1010000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1010000
|
Size: |
8192
|
|
C000012000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521564978.000000C000012000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000012000
|
Size: |
4096
|
|
25FF1A02000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519456967.0000025FF1A02000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
25FF1A02000
|
Size: |
4096
|
|
F63587F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518718179.000000F63587F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F63587F000
|
Size: |
4096
|
|
C000012000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257030452.000000C000012000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000012000
|
Size: |
4096
|
|
28D55EA0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258596322.0000028D55EA0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55EA0000
|
Size: |
12288
|
|
28D66FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430171331.00000028D66FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D66FE000
|
Size: |
8192
|
|
C000048000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521927280.000000C000048000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000048000
|
Size: |
4096
|
|
290000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000000.259419294.0000000000290000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
290000
|
Size: |
4096
|
|
2507B922000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.300848002.000002507B922000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B922000
|
Size: |
131072
|
|
C00008D000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522261390.000000C00008D000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00008D000
|
Size: |
4096
|
|
192FBC45000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431038214.00000192FBC45000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC45000
|
Size: |
8192
|
|
F2532FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518875609.000000F2532FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F2532FF000
|
Size: |
4096
|
|
411D6AC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518833778.000000411D6AC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411D6AC000
|
Size: |
16384
|
|
704000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000000.260460453.0000000000704000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
704000
|
Size: |
262144
|
|
4130B7C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518743520.0000004130B7C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4130B7C000
|
Size: |
16384
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256857053.00000000007D0000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
7D0000
|
Size: |
4096
|
|
C0001C4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257929780.000000C0001C4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C4000
|
Size: |
4096
|
|
F25337E000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518882130.000000F25337E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25337E000
|
Size: |
8192
|
|
173A2857000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.294972015.00000173A2857000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2857000
|
Size: |
4096
|
|
F2536FD000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518964773.000000F2536FD000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F2536FD000
|
Size: |
12288
|
|
28D65FF000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430152930.00000028D65FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D65FF000
|
Size: |
4096
|
|
413097E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518719481.000000413097E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
413097E000
|
Size: |
8192
|
|
1FDB6C84000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319820593.000001FDB6C84000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C84000
|
Size: |
32768
|
|
18A51A56000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519424218.0000018A51A56000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A56000
|
Size: |
16384
|
|
411E17E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519015405.000000411E17E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E17E000
|
Size: |
8192
|
|
2507BA27000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520685260.000002507BA27000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA27000
|
Size: |
20480
|
|
C0001C0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522832838.000000C0001C0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C0000
|
Size: |
8192
|
|
C000186000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522718471.000000C000186000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000186000
|
Size: |
4096
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
URLs found in memory or binary data |
Networking |
|
|
741000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000002.521017161.0000000000741000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
741000
|
Size: |
8192
|
|
18A51A75000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519496671.0000018A51A75000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A75000
|
Size: |
4096
|
|
80E000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000002.256980891.000000000080E000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
80E000
|
Size: |
94208
|
|
58B000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000002.256036731.000000000058B000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
58B000
|
Size: |
2134016
|
|
23E7C3E0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523295661.0000023E7C3E0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7C3E0000
|
Size: |
4096
|
|
173A2848000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295465522.00000173A2848000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2848000
|
Size: |
4096
|
|
C0000B8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522393374.000000C0000B8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B8000
|
Size: |
16384
|
|
411E57F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519065446.000000411E57F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E57F000
|
Size: |
4096
|
|
1FDB6C47000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319151066.000001FDB6C47000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C47000
|
Size: |
4096
|
|
411E37F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519041519.000000411E37F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E37F000
|
Size: |
4096
|
|
28D55E34000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258519155.0000028D55E34000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E34000
|
Size: |
20480
|
|
F25357D000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518911308.000000F25357D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25357D000
|
Size: |
12288
|
|
C0000B0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522374477.000000C0000B0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B0000
|
Size: |
4096
|
|
794000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000000.251757978.0000000000794000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
794000
|
Size: |
262144
|
|
F635D7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518935938.000000F635D7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635D7E000
|
Size: |
8192
|
|
252BB0BA000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519514826.00000252BB0BA000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB0BA000
|
Size: |
24576
|
|
1FDB6C42000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319641931.000001FDB6C42000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C42000
|
Size: |
8192
|
|
1FDB6C49000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319134502.000001FDB6C49000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C49000
|
Size: |
20480
|
|
23E77040000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522978638.0000023E77040000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77040000
|
Size: |
28672
|
|
C000070000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522146599.000000C000070000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000070000
|
Size: |
12288
|
|
23E77048000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522992248.0000023E77048000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77048000
|
Size: |
180224
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
2507AE79000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519543523.000002507AE79000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE79000
|
Size: |
28672
|
|
80D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000000.251844048.000000000080D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
80D000
|
Size: |
4096
|
|
C000010000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257025263.000000C000010000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000010000
|
Size: |
4096
|
|
252BB000000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519028946.00000252BB000000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB000000
|
Size: |
73728
|
|
18A51A65000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000003.296743913.0000018A51A65000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A65000
|
Size: |
57344
|
|
770000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521043199.0000000000770000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
770000
|
Size: |
4096
|
|
1FDB6C7E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319773610.000001FDB6C7E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C7E000
|
Size: |
16384
|
|
C0001BC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257870262.000000C0001BC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001BC000
|
Size: |
4096
|
|
C00008B000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522246594.000000C00008B000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00008B000
|
Size: |
4096
|
|
C000046000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521905742.000000C000046000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000046000
|
Size: |
4096
|
|
C0000D8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257283978.000000C0000D8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000D8000
|
Size: |
4096
|
|
CE29AFB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518742148.000000CE29AFB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CE29AFB000
|
Size: |
20480
|
|
321000
|
unkown
|
page execute read
|
|
|
|
Name: |
00000000.00000000.251012510.0000000000321000.00000020.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page execute read
|
Base address: |
321000
|
Size: |
2531328
|
|
704000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.520801582.0000000000704000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
704000
|
Size: |
40960
|
|
20C05A57000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519115547.0000020C05A57000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A57000
|
Size: |
40960
|
|
411DE7F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518962040.000000411DE7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411DE7F000
|
Size: |
4096
|
|
173A2847000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000003.294922537.00000173A2847000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2847000
|
Size: |
4096
|
|
173A4270000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519538351.00000173A4270000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
173A4270000
|
Size: |
4096
|
|
2507AE76000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519530360.000002507AE76000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE76000
|
Size: |
8192
|
|
23E77230000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523077540.0000023E77230000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77230000
|
Size: |
4096
|
|
1FDB6C46000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319185872.000001FDB6C46000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C46000
|
Size: |
4096
|
|
2507AFB9000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520023000.000002507AFB9000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AFB9000
|
Size: |
176128
|
|
18A51A13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519246707.0000018A51A13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A13000
|
Size: |
86016
|
|
C00008A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257149594.000000C00008A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00008A000
|
Size: |
12288
|
|
20C05820000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518785458.0000020C05820000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05820000
|
Size: |
4096
|
|
252BBB13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519682734.00000252BBB13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BBB13000
|
Size: |
32768
|
|
252BB0C9000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519544979.00000252BB0C9000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB0C9000
|
Size: |
4096
|
|
411E27F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519035024.000000411E27F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411E27F000
|
Size: |
4096
|
|
23E77264000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523119879.0000023E77264000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E77264000
|
Size: |
4096
|
|
252BB113000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519664605.00000252BB113000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB113000
|
Size: |
4096
|
|
25FF1302000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519432534.0000025FF1302000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1302000
|
Size: |
28672
|
|
18A52202000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519572321.0000018A52202000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
18A52202000
|
Size: |
4096
|
|
28D55E3C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258537090.0000028D55E3C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E3C000
|
Size: |
4096
|
|
4130A7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518732469.0000004130A7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4130A7E000
|
Size: |
8192
|
|
C00000E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521491273.000000C00000E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00000E000
|
Size: |
4096
|
|
4130E7C000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518925454.0000004130E7C000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4130E7C000
|
Size: |
16384
|
|
C0001B6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257757638.000000C0001B6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B6000
|
Size: |
4096
|
|
252BBB3A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519702480.00000252BBB3A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BBB3A000
|
Size: |
4096
|
|
C0001A4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522796065.000000C0001A4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001A4000
|
Size: |
4096
|
|
C0001BE000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257878110.000000C0001BE000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001BE000
|
Size: |
4096
|
|
B405CFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319435423.000000B405CFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405CFE000
|
Size: |
8192
|
|
192FBAD0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430187619.00000192FBAD0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBAD0000
|
Size: |
4096
|
|
73C000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000004.00000002.520976645.000000000073C000.00000008.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
73C000
|
Size: |
16384
|
|
23E77250000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523086389.0000023E77250000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77250000
|
Size: |
12288
|
|
C0000E4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257319683.000000C0000E4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E4000
|
Size: |
4096
|
|
25FF0FA0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519016572.0000025FF0FA0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF0FA0000
|
Size: |
4096
|
|
C000092000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522296559.000000C000092000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000092000
|
Size: |
4096
|
|
7D1000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.256879707.00000000007D1000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
7D1000
|
Size: |
8192
|
|
2507BA00000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520527873.000002507BA00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA00000
|
Size: |
4096
|
|
20C05B13000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519315827.0000020C05B13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05B13000
|
Size: |
20480
|
|
697033B000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518842306.000000697033B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
697033B000
|
Size: |
20480
|
|
C000192000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257486086.000000C000192000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000192000
|
Size: |
4096
|
|
B405A7B000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319374885.000000B405A7B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405A7B000
|
Size: |
20480
|
|
C000090000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257198236.000000C000090000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000090000
|
Size: |
4096
|
|
C000138000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522627283.000000C000138000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000138000
|
Size: |
45056
|
|
69709F9000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518940061.00000069709F9000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
69709F9000
|
Size: |
28672
|
|
18A51A41000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519375944.0000018A51A41000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A41000
|
Size: |
81920
|
|
C0001B8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257836086.000000C0001B8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B8000
|
Size: |
4096
|
|
173A2842000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519286113.00000173A2842000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2842000
|
Size: |
126976
|
|
C0000A0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522336132.000000C0000A0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A0000
|
Size: |
4096
|
|
C000027000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257084692.000000C000027000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000027000
|
Size: |
4096
|
|
C000194000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522756349.000000C000194000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000194000
|
Size: |
4096
|
|
F635C7D000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518910596.000000F635C7D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F635C7D000
|
Size: |
12288
|
|
77E000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000002.521145096.000000000077E000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
77E000
|
Size: |
94208
|
|
173A2900000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519467275.00000173A2900000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2900000
|
Size: |
4096
|
|
C000010000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521522755.000000C000010000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000010000
|
Size: |
4096
|
|
C0001C8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257953032.000000C0001C8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C8000
|
Size: |
4096
|
|
C0001A2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522790102.000000C0001A2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001A2000
|
Size: |
4096
|
|
740000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521005413.0000000000740000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
740000
|
Size: |
4096
|
|
C0001DC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258066105.000000C0001DC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001DC000
|
Size: |
4096
|
|
25FF1251000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519397118.0000025FF1251000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1251000
|
Size: |
81920
|
|
C00012E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522607627.000000C00012E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00012E000
|
Size: |
4096
|
|
321000
|
unkown
|
page execute read
|
|
|
|
Name: |
00000000.00000002.255162576.0000000000321000.00000020.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute read
|
Base address: |
321000
|
Size: |
2531328
|
|
1FDB6C56000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319663353.000001FDB6C56000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C56000
|
Size: |
36864
|
|
C000035000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257107628.000000C000035000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000035000
|
Size: |
4096
|
|
4FB000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000002.519766235.00000000004FB000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
4FB000
|
Size: |
2134016
|
|
18A51A8A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519515855.0000018A51A8A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A8A000
|
Size: |
4096
|
|
2507ADD0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519168411.000002507ADD0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
2507ADD0000
|
Size: |
8192
|
|
B7F4BFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521256871.000000B7F4BFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F4BFF000
|
Size: |
4096
|
|
291000
|
unkown
|
page execute read
|
|
|
|
Name: |
00000004.00000002.518696466.0000000000291000.00000020.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page execute read
|
Base address: |
291000
|
Size: |
2531328
|
|
1FDB6C6A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319687452.000001FDB6C6A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C6A000
|
Size: |
4096
|
|
C0000BA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257258288.000000C0000BA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000BA000
|
Size: |
4096
|
|
1FDB6C2D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319238283.000001FDB6C2D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C2D000
|
Size: |
36864
|
|
28D55BFB000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258359961.0000028D55BFB000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55BFB000
|
Size: |
16384
|
|
C000096000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522313449.000000C000096000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000096000
|
Size: |
4096
|
|
2507B954000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520199180.000002507B954000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B954000
|
Size: |
106496
|
|
80E000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.251849873.000000000080E000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
80E000
|
Size: |
94208
|
|
C000084000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257113067.000000C000084000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000084000
|
Size: |
4096
|
|
2507AE5B000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519488109.000002507AE5B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE5B000
|
Size: |
61440
|
|
2507AE92000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.300827880.000002507AE92000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE92000
|
Size: |
57344
|
|
23E77210000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523068464.0000023E77210000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77210000
|
Size: |
8192
|
|
C000019000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257046793.000000C000019000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000019000
|
Size: |
4096
|
|
173A4330000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295843573.00000173A4330000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
173A4330000
|
Size: |
4096
|
|
1FDB6C00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319479616.000001FDB6C00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C00000
|
Size: |
73728
|
|
2507AE00000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519184397.000002507AE00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE00000
|
Size: |
73728
|
|
2507ADB0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519161105.000002507ADB0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
2507ADB0000
|
Size: |
4096
|
|
1FDB6C63000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319093832.000001FDB6C63000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C63000
|
Size: |
4096
|
|
C0000A2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522343484.000000C0000A2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A2000
|
Size: |
12288
|
|
C0001C4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522840009.000000C0001C4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C4000
|
Size: |
4096
|
|
C000123000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522579872.000000C000123000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000123000
|
Size: |
4096
|
|
2507BA02000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520543737.000002507BA02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507BA02000
|
Size: |
65536
|
|
C000004000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521423446.000000C000004000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000004000
|
Size: |
4096
|
|
C0000F2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522487164.000000C0000F2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F2000
|
Size: |
4096
|
|
C000025000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521768153.000000C000025000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000025000
|
Size: |
4096
|
|
C00018E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257474716.000000C00018E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018E000
|
Size: |
4096
|
|
18A51A29000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519307608.0000018A51A29000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A29000
|
Size: |
94208
|
|
C00006A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522127949.000000C00006A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00006A000
|
Size: |
4096
|
|
C0000E2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257301426.000000C0000E2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E2000
|
Size: |
4096
|
|
4130D7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518896551.0000004130D7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
4130D7E000
|
Size: |
8192
|
|
18A51A00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519167703.0000018A51A00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A00000
|
Size: |
4096
|
|
CE29CFB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518760159.000000CE29CFB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CE29CFB000
|
Size: |
20480
|
|
C000144000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522645102.000000C000144000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000144000
|
Size: |
8192
|
|
20C05980000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518795819.0000020C05980000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
20C05980000
|
Size: |
4096
|
|
1FDB6C6B000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319031505.000001FDB6C6B000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C6B000
|
Size: |
36864
|
|
173A27D0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519005507.00000173A27D0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
173A27D0000
|
Size: |
4096
|
|
B7F57FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521361239.000000B7F57FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F57FF000
|
Size: |
4096
|
|
1FDB6C48000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319145205.000001FDB6C48000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C48000
|
Size: |
4096
|
|
28D62FE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430123426.00000028D62FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D62FE000
|
Size: |
8192
|
|
C000027000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521781307.000000C000027000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000027000
|
Size: |
4096
|
|
25FF1200000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519101442.0000025FF1200000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1200000
|
Size: |
4096
|
|
20C05B00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519266472.0000020C05B00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05B00000
|
Size: |
4096
|
|
C0000A8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257241548.000000C0000A8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A8000
|
Size: |
16384
|
|
2507AE13000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519242099.000002507AE13000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE13000
|
Size: |
86016
|
|
794000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256806186.0000000000794000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
794000
|
Size: |
40960
|
|
C00004E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521980932.000000C00004E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00004E000
|
Size: |
4096
|
|
1FDB6AC0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319465547.000001FDB6AC0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6AC0000
|
Size: |
4096
|
|
C000198000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257503677.000000C000198000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000198000
|
Size: |
4096
|
|
252BB0CB000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519554294.00000252BB0CB000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB0CB000
|
Size: |
86016
|
|
C0000B6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257249135.000000C0000B6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000B6000
|
Size: |
4096
|
|
1FDB6C44000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319224103.000001FDB6C44000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C44000
|
Size: |
4096
|
|
25FF1140000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
0000000C.00000003.301083403.0000025FF1140000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
25FF1140000
|
Size: |
4096
|
|
C00009E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522330082.000000C00009E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00009E000
|
Size: |
4096
|
|
73B000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000004.00000002.520965124.000000000073B000.00000004.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
73B000
|
Size: |
4096
|
|
B405AFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319410368.000000B405AFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405AFE000
|
Size: |
8192
|
|
173A2824000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519176637.00000173A2824000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2824000
|
Size: |
20480
|
|
C000036000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521837436.000000C000036000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000036000
|
Size: |
4096
|
|
F6359FC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518738451.000000F6359FC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F6359FC000
|
Size: |
16384
|
|
25FF0FB0000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519036588.0000025FF0FB0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF0FB0000
|
Size: |
4096
|
|
C0000DA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257290590.000000C0000DA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000DA000
|
Size: |
4096
|
|
CE295CC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518724968.000000CE295CC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CE295CC000
|
Size: |
16384
|
|
C0001A0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522784237.000000C0001A0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001A0000
|
Size: |
4096
|
|
173A2862000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519389030.00000173A2862000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2862000
|
Size: |
53248
|
|
1FDB6C7A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319766645.000001FDB6C7A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C7A000
|
Size: |
4096
|
|
20C05B02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519272261.0000020C05B02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05B02000
|
Size: |
53248
|
|
C000192000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522749478.000000C000192000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000192000
|
Size: |
4096
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
URLs found in memory or binary data |
Networking |
|
|
2507B9CB000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520503884.000002507B9CB000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B9CB000
|
Size: |
32768
|
|
C00000A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521461681.000000C00000A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00000A000
|
Size: |
4096
|
|
18A51990000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519155138.0000018A51990000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
18A51990000
|
Size: |
4096
|
|
20C05810000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518776268.0000020C05810000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05810000
|
Size: |
4096
|
|
41306FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518701544.00000041306FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41306FF000
|
Size: |
4096
|
|
C000008000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521440805.000000C000008000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000008000
|
Size: |
4096
|
|
C00000C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257015778.000000C00000C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00000C000
|
Size: |
4096
|
|
B405DFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319441790.000000B405DFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405DFE000
|
Size: |
8192
|
|
C00012C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522601851.000000C00012C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00012C000
|
Size: |
4096
|
|
B7F45FA000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521177728.000000B7F45FA000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F45FA000
|
Size: |
24576
|
|
1FDB6C40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319175566.000001FDB6C40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C40000
|
Size: |
28672
|
|
C000020000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257061009.000000C000020000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000020000
|
Size: |
4096
|
|
1FDB6C45000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319207068.000001FDB6C45000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C45000
|
Size: |
4096
|
|
25FF1229000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519273533.0000025FF1229000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1229000
|
Size: |
77824
|
|
320000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.251008434.0000000000320000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
320000
|
Size: |
4096
|
|
290000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000004.00000002.518687044.0000000000290000.00000002.00000001.01000000.00000004.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
290000
|
Size: |
4096
|
|
F6356FC000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518705870.000000F6356FC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F6356FC000
|
Size: |
16384
|
|
808000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256919572.0000000000808000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
808000
|
Size: |
8192
|
|
C000020000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521758291.000000C000020000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000020000
|
Size: |
4096
|
|
DE8F7FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258219555.000000DE8F7FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8F7FF000
|
Size: |
4096
|
|
C00002A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257090311.000000C00002A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00002A000
|
Size: |
4096
|
|
252BAF70000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519011280.00000252BAF70000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
252BAF70000
|
Size: |
4096
|
|
C00018A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522730847.000000C00018A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018A000
|
Size: |
4096
|
|
2507AE43000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.298874046.000002507AE43000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE43000
|
Size: |
53248
|
|
1FDB6C3A000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319198803.000001FDB6C3A000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C3A000
|
Size: |
4096
|
|
C0000F0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257358680.000000C0000F0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000F0000
|
Size: |
4096
|
|
25FF1110000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519075855.0000025FF1110000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
25FF1110000
|
Size: |
4096
|
|
25FF1213000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.519192041.0000025FF1213000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
25FF1213000
|
Size: |
86016
|
|
18A51830000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519116104.0000018A51830000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51830000
|
Size: |
4096
|
|
1FDB6C4F000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319657095.000001FDB6C4F000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C4F000
|
Size: |
4096
|
|
2507AE3C000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519402138.000002507AE3C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE3C000
|
Size: |
90112
|
|
C000180000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522696911.000000C000180000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000180000
|
Size: |
4096
|
|
252BBA02000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519671171.00000252BBA02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BBA02000
|
Size: |
4096
|
|
18A51890000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000002.519145290.0000018A51890000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51890000
|
Size: |
8192
|
|
C00018C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257469348.000000C00018C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018C000
|
Size: |
4096
|
|
2507B9BD000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520460688.000002507B9BD000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B9BD000
|
Size: |
49152
|
|
23E7707E000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523054816.0000023E7707E000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E7707E000
|
Size: |
24576
|
|
C0000CB000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257267254.000000C0000CB000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000CB000
|
Size: |
4096
|
|
2507B943000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520122125.000002507B943000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B943000
|
Size: |
65536
|
|
1FDB6C39000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319231466.000001FDB6C39000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C39000
|
Size: |
4096
|
|
2507AD10000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519098556.000002507AD10000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AD10000
|
Size: |
4096
|
|
2507B922000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000003.300894469.000002507B922000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B922000
|
Size: |
131072
|
|
B405EFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319449508.000000B405EFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405EFE000
|
Size: |
8192
|
|
23E77083000
|
heap
|
page read and write
|
|
|
|
Name: |
00000004.00000003.392223841.0000023E77083000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
23E77083000
|
Size: |
4096
|
|
2507AE29000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519321809.000002507AE29000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE29000
|
Size: |
73728
|
|
23E7C3C0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.523250612.0000023E7C3C0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
23E7C3C0000
|
Size: |
90112
|
|
192FBC02000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430367258.00000192FBC02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC02000
|
Size: |
65536
|
|
173A2889000
|
heap
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519448855.00000173A2889000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
173A2889000
|
Size: |
24576
|
|
252BAF40000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518996165.00000252BAF40000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BAF40000
|
Size: |
8192
|
|
C000150000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522660693.000000C000150000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000150000
|
Size: |
24576
|
|
28D55BB0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258303400.0000028D55BB0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55BB0000
|
Size: |
8192
|
|
B405B7E000
|
stack
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319425513.000000B405B7E000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B405B7E000
|
Size: |
8192
|
|
DE8F5FF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258210736.000000DE8F5FF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8F5FF000
|
Size: |
4096
|
|
1FDB6C30000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.297363536.000001FDB6C30000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C30000
|
Size: |
49152
|
|
25FF1140000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
0000000C.00000003.301065328.0000025FF1140000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
25FF1140000
|
Size: |
4096
|
|
C000108000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257427925.000000C000108000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000108000
|
Size: |
4096
|
|
C000017000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257040990.000000C000017000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000017000
|
Size: |
4096
|
|
1FDB6C62000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319673311.000001FDB6C62000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C62000
|
Size: |
4096
|
|
173A4330000
|
remote allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000003.295858867.00000173A4330000.00000004.00000400.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
free memory
|
Regiontype: |
remote allocation
|
Protect: |
page read and write
|
Base address: |
173A4330000
|
Size: |
4096
|
|
C000038000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521852651.000000C000038000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000038000
|
Size: |
12288
|
|
CE29BFE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518752040.000000CE29BFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
CE29BFE000
|
Size: |
8192
|
|
B7F53FE000
|
stack
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521322700.000000B7F53FE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
B7F53FE000
|
Size: |
8192
|
|
1FDB6C3D000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319630357.000001FDB6C3D000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C3D000
|
Size: |
12288
|
|
C0000E8000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522463210.000000C0000E8000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000E8000
|
Size: |
4096
|
|
20C05A73000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.519207220.0000020C05A73000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A73000
|
Size: |
8192
|
|
C00003C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521868084.000000C00003C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00003C000
|
Size: |
4096
|
|
192FBC48000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431044682.00000192FBC48000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBC48000
|
Size: |
24576
|
|
1FDB6C77000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319049614.000001FDB6C77000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C77000
|
Size: |
8192
|
|
28D55BD0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258313811.0000028D55BD0000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55BD0000
|
Size: |
4096
|
|
18A51A69000
|
heap
|
page read and write
|
|
|
|
Name: |
00000008.00000003.296708063.0000018A51A69000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
18A51A69000
|
Size: |
36864
|
|
C0001B4000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257697446.000000C0001B4000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001B4000
|
Size: |
4096
|
|
697077A000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.518853008.000000697077A000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
697077A000
|
Size: |
24576
|
|
1FDB6C79000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319019640.000001FDB6C79000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C79000
|
Size: |
36864
|
|
C0000FC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257376870.000000C0000FC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000FC000
|
Size: |
12288
|
|
C000052000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522013015.000000C000052000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000052000
|
Size: |
4096
|
|
2507AE56000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519471919.000002507AE56000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE56000
|
Size: |
16384
|
|
41302CB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518682873.00000041302CB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
41302CB000
|
Size: |
20480
|
|
411DC7F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000008.00000002.518943768.000000411DC7F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
8
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
411DC7F000
|
Size: |
4096
|
|
C0001C0000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257891160.000000C0001C0000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001C0000
|
Size: |
4096
|
|
28D55C4C000
|
heap
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258406632.0000028D55C4C000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
28D55C4C000
|
Size: |
98304
|
Signature Hits |
Behavior Group |
Mitre Attack |
|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) |
Malware Analysis System Evasion |
Security Software Discovery
|
|
2507B9B1000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.520442572.000002507B9B1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507B9B1000
|
Size: |
36864
|
|
C000098000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522319710.000000C000098000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000098000
|
Size: |
20480
|
|
C000068000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522109249.000000C000068000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000068000
|
Size: |
4096
|
|
173A42B0000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000006.00000002.519546970.00000173A42B0000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
173A42B0000
|
Size: |
8192
|
|
800000
|
unkown
|
page read and write
|
|
|
|
Name: |
00000000.00000002.256905053.0000000000800000.00000004.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page read and write
|
Base address: |
800000
|
Size: |
4096
|
|
C000096000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257210884.000000C000096000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000096000
|
Size: |
12288
|
|
DE8EFFF000
|
stack
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258145679.000000DE8EFFF000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
DE8EFFF000
|
Size: |
4096
|
|
6970DFE000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519067201.0000006970DFE000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
6970DFE000
|
Size: |
8192
|
|
1FDB6C74000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000003.319003413.000001FDB6C74000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
free memory
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C74000
|
Size: |
57344
|
|
80D000
|
unkown
|
page write copy
|
|
|
|
Name: |
00000000.00000002.256939772.000000000080D000.00000008.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
unkown
|
Protect: |
page write copy
|
Base address: |
80D000
|
Size: |
4096
|
|
C000089000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522229040.000000C000089000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000089000
|
Size: |
4096
|
|
252BAED0000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518978474.00000252BAED0000.00000004.00000020.00040000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BAED0000
|
Size: |
4096
|
|
58B000
|
unkown
|
page readonly
|
|
|
|
Name: |
00000000.00000000.251363332.000000000058B000.00000002.00000001.01000000.00000003.sdmp
|
TargetID: |
0
|
Dumpstage: |
process new
|
Regiontype: |
unkown
|
Protect: |
page readonly
|
Base address: |
58B000
|
Size: |
2134016
|
|
F25387D000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518998866.000000F25387D000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25387D000
|
Size: |
12288
|
|
C000016000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521647123.000000C000016000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000016000
|
Size: |
16384
|
|
C000148000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522651606.000000C000148000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000148000
|
Size: |
12288
|
|
C000092000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257204644.000000C000092000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000092000
|
Size: |
8192
|
|
C000100000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522519336.000000C000100000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000100000
|
Size: |
4096
|
|
2507AE84000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000B.00000002.519573514.000002507AE84000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
11
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
2507AE84000
|
Size: |
12288
|
|
C0000A2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257232463.000000C0000A2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A2000
|
Size: |
4096
|
|
252BB102000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519650656.00000252BB102000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB102000
|
Size: |
32768
|
|
C000121000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522574202.000000C000121000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000121000
|
Size: |
4096
|
|
252BB0C1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519535765.00000252BB0C1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB0C1000
|
Size: |
4096
|
|
28D64FC000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430142368.00000028D64FC000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
28D64FC000
|
Size: |
16384
|
|
28D55B60000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258288589.0000028D55B60000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55B60000
|
Size: |
4096
|
|
C000182000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522705881.000000C000182000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000182000
|
Size: |
4096
|
|
20C05880000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518790784.0000020C05880000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05880000
|
Size: |
8192
|
|
252BB087000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519500000.00000252BB087000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB087000
|
Size: |
12288
|
|
C000196000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522762829.000000C000196000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000196000
|
Size: |
4096
|
|
C0000A6000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257236726.000000C0000A6000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000A6000
|
Size: |
4096
|
|
C0001BC000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522824372.000000C0001BC000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0001BC000
|
Size: |
8192
|
|
1FDB6C65000
|
heap
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319680589.000001FDB6C65000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
1FDB6C65000
|
Size: |
8192
|
|
F6352FB000
|
stack
|
page read and write
|
|
|
|
Name: |
00000007.00000002.518688279.000000F6352FB000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F6352FB000
|
Size: |
20480
|
|
20C05A00000
|
heap
|
page read and write
|
|
|
|
Name: |
00000005.00000002.518800019.0000020C05A00000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
5
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
20C05A00000
|
Size: |
4096
|
|
C000108000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522535277.000000C000108000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000108000
|
Size: |
12288
|
|
C000186000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257458060.000000C000186000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000186000
|
Size: |
12288
|
|
C0000D2000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.257278532.000000C0000D2000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000D2000
|
Size: |
8192
|
|
C00004A000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.521948940.000000C00004A000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00004A000
|
Size: |
8192
|
|
252BB0E1000
|
heap
|
page read and write
|
|
|
|
Name: |
00000007.00000002.519635676.00000252BB0E1000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
7
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
252BB0E1000
|
Size: |
32768
|
|
C0000CA000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522415376.000000C0000CA000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C0000CA000
|
Size: |
4096
|
|
28D55E30000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000000.00000002.258507740.0000028D55E30000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
0
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
28D55E30000
|
Size: |
8192
|
|
192FBB20000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.430339988.00000192FBB20000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBB20000
|
Size: |
8192
|
|
413087F000
|
stack
|
page read and write
|
|
|
|
Name: |
00000006.00000002.518711280.000000413087F000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
6
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
413087F000
|
Size: |
4096
|
|
192FBD02000
|
heap
|
page read and write
|
|
|
|
Name: |
0000000D.00000002.431406594.00000192FBD02000.00000004.00000020.00020000.00000000.sdmp
|
TargetID: |
13
|
Dumpstage: |
process exit
|
Regiontype: |
heap
|
Protect: |
page read and write
|
Base address: |
192FBD02000
|
Size: |
16384
|
|
F25307B000
|
stack
|
page read and write
|
|
|
|
Name: |
0000000C.00000002.518866191.000000F25307B000.00000004.00000010.00020000.00000000.sdmp
|
TargetID: |
12
|
Dumpstage: |
process exit
|
Regiontype: |
stack
|
Protect: |
page read and write
|
Base address: |
F25307B000
|
Size: |
20480
|
|
C00006C000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522138539.000000C00006C000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00006C000
|
Size: |
8192
|
|
C00018E000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522743629.000000C00018E000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C00018E000
|
Size: |
4096
|
|
C000110000
|
direct allocation
|
page read and write
|
|
|
|
Name: |
00000004.00000002.522545098.000000C000110000.00000004.00001000.00020000.00000000.sdmp
|
TargetID: |
4
|
Dumpstage: |
process exit
|
Regiontype: |
direct allocation
|
Protect: |
page read and write
|
Base address: |
C000110000
|
Size: |
4096
|
|
1FDB7402000
|
trusted library allocation
|
page read and write
|
|
|
|
Name: |
00000009.00000002.319855844.000001FDB7402000.00000004.00000800.00020000.00000000.sdmp
|
TargetID: |
9
|
Dumpstage: |
process exit
|
Regiontype: |
trusted library allocation
|
Protect: |
page read and write
|
Base address: |
1FDB7402000
|
Size: |
4096
|
|