Automated Malware Analysis IOC Report for

Details

Name:	00000004.00000003.315424551.0000000004EA3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA3000
Size:	233472

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383284019.000000000478A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	478A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.363952559.00000000048CF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	48CF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000002.555314514.0000000000502000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	502000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.359982101.00000000048CF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	48CF000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000019.00000002.391670186.0000000003411000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3411000
Size:	557056

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383566865.00000000047F3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F3000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360137256.000000000489A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.363022584.0000000004938000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4938000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.385418574.0000000004828000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4828000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000019.00000002.390692877.0000000000F62000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F62000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.315994973.0000000004E6E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E6E000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314549221.0000000004D88000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D88000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.386694211.0000000004721000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4721000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.364780852.000000000489A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.386537145.00000000047F2000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F2000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000019.00000002.391832360.0000000004419000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4419000
Size:	540672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.385532540.00000000010C3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C3000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383169195.00000000047BF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47BF000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.316144236.0000000004E6E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E6E000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000002.560490990.00000000061B0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	61B0000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Installs a raw input device (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
Yara signature match	System Summary

Details

Name:	00000014.00000003.360433850.0000000004903000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4903000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314585596.0000000004E06000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E06000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360821611.000000000496B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	496B000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.315927794.0000000004E06000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E06000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.315764008.0000000004E3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E3A000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000002.559058243.0000000003A79000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3A79000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000001B.00000003.386511135.000000000478A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	478A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360037831.0000000004831000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4831000
Size:	647168

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383407849.00000000047BF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47BF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.316303784.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383645453.000000000485B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	485B000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383202245.0000000004721000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4721000
Size:	647168

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.366099101.0000000004902000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4902000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.386616181.0000000004756000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4756000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.370237585.0000000004831000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4831000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.369728872.0000000004866000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4866000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.363076349.00000000039E5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E5000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.316393189.0000000004D88000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D88000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001E.00000002.406011428.0000000000D02000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	D02000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000002.557771680.0000000002A31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A31000
Size:	536576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000003.383348180.0000000004756000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4756000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314529331.0000000004E3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E3A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360697455.0000000004938000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4938000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314683885.0000000004EA3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA3000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001E.00000002.411732283.00000000033A1000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33A1000
Size:	557056

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360563466.0000000004903000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4903000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314613880.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.314455197.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.366655070.0000000004902000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4902000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383504563.00000000047F3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F3000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360273834.0000000004866000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4866000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.359604202.0000000004866000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4866000
Size:	643072

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383082558.0000000004756000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4756000
Size:	643072

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.360354824.00000000048CF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	48CF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.383597669.0000000004828000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4828000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.386566314.00000000047F2000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47F2000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001E.00000002.412114966.00000000043A9000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43A9000
Size:	540672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.386381872.00000000047BF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47BF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000029.00000002.497049008.00007FF501EA0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EA0000
Size:	4096

Details

Name:	00000011.00000000.363246010.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	61440

Details

Name:	00000010.00000002.348532123.000000000507D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	507D000
Size:	12288

Details

Name:	00000010.00000002.348297823.00000000014FD000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14FD000
Size:	8192

Details

Name:	0000001C.00000002.375955082.000000000080D000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	80D000
Size:	4096

Details

Name:	00000004.00000002.334735646.00000000011C0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	0000001E.00000003.387195019.000000000159D000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159D000
Size:	28672

Details

Name:	00000000.00000002.306566094.0000000000D70000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D70000
Size:	24576

Details

Name:	0000002A.00000002.474152840.00007FF535FDE000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FDE000
Size:	4096

Details

Name:	0000001E.00000003.390681019.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000011.00000002.556334168.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000005.00000002.560410383.0000000006110000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6110000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara signature match	System Summary

Details

Name:	0000002D.00000000.544556581.00007FF579841000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579841000
Size:	16384

Details

Name:	00000019.00000003.373190674.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000014.00000003.356003063.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000005.00000003.498440094.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.378574048.0000000003920000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3920000
Size:	4096

Details

Name:	00000014.00000003.379019247.0000000003928000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3928000
Size:	4096

Details

Name:	00000006.00000002.345861203.00007DF51A1B2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1B2000
Size:	4096

Details

Name:	00000015.00000003.355442145.000001C86C103000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C103000
Size:	4096

Details

Name:	00000027.00000002.449884572.00007DF53EDA0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDA0000
Size:	4096

Details

Name:	00000005.00000003.535512290.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.366198667.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	28672

Details

Name:	0000001B.00000003.391835481.0000000001082000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1082000
Size:	65536

Details

Name:	00000020.00000000.400473605.00000239ECB90000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECB90000
Size:	102400

Details

Name:	00000019.00000002.392126663.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	57344

Details

Name:	00000019.00000002.391487120.0000000003390000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	16384

Details

Name:	0000002A.00000002.473948495.00007DF543D12000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D12000
Size:	4096

Details

Name:	00000004.00000002.335260142.0000000004D6E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D6E000
Size:	8192

Details

Name:	00000014.00000003.370715645.0000000004899000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4899000
Size:	4096

Details

Name:	00000000.00000000.289072563.0000000000222000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	222000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000011.00000000.346025649.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	0000001E.00000003.387600735.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.318229121.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000002.335276090.0000000004D80000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D80000
Size:	16384

Details

Name:	00000014.00000003.355973634.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000001E.00000002.412088167.00000000043A1000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43A1000
Size:	28672

Details

Name:	0000001B.00000003.393654170.0000000001010000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	20480

Details

Name:	00000000.00000002.306484229.0000000000CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CDD000
Size:	4096

Details

Name:	00000005.00000003.316367498.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	0000000D.00000002.346282296.0000000001800000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1800000
Size:	4096

Details

Name:	00000000.00000002.306781099.0000000000E40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E40000
Size:	200704

Details

Name:	00000000.00000002.307613055.00000000050CF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50CF000
Size:	4096

Details

Name:	00000014.00000003.377883146.000000000393F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	393F000
Size:	8192

Details

Name:	00000019.00000003.374262262.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000006.00000002.347017569.00007FF50C49E000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C49E000
Size:	4096

Details

Name:	00000010.00000002.348553921.000000000517E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	517E000
Size:	8192

Details

Name:	00000006.00000002.346728803.00007FF50C44F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C44F000
Size:	12288

Details

Name:	00000004.00000002.335330741.00000000FF6C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6C0000
Size:	4096

Details

Name:	0000001E.00000002.408613123.000000000168E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	168E000
Size:	8192

Details

Name:	00000029.00000003.477185887.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	200704

Details

Name:	00000010.00000003.347081705.0000000005570000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5570000
Size:	65536

Details

Name:	00000000.00000000.289136471.000000007F020000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F020000
Size:	4096

Details

Name:	0000001B.00000002.396338038.0000000001012000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1012000
Size:	4096

Details

Name:	00000005.00000002.556798732.0000000000FAF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FAF000
Size:	4096

Details

Name:	00000029.00000003.469923564.0000024274984000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274984000
Size:	12288

Details

Name:	00000015.00000002.373265955.00007FF5AE891000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AE891000
Size:	4096

Details

Name:	00000004.00000002.335247774.0000000004D38000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D38000
Size:	49152

Details

Name:	0000002D.00000000.544397269.00007DF5874B2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874B2000
Size:	4096

Details

Name:	0000001C.00000002.376599292.000000000099E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	99E000
Size:	8192

Details

Name:	00000029.00000002.495604330.0000024274918000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274918000
Size:	36864

Details

Name:	0000001B.00000003.391751468.000000000107D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	107D000
Size:	135168

Details

Name:	0000002D.00000002.555000451.0000007919079000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7919079000
Size:	28672

Details

Name:	00000006.00000002.346605124.00007FF50C3C5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C3C5000
Size:	4096

Details

Name:	0000000D.00000002.346119506.00000000013E6000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E6000
Size:	176128

Details

Name:	00000029.00000003.480726420.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	4096

Details

Name:	0000000D.00000002.347051485.0000000004391000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4391000
Size:	8192

Details

Name:	00000011.00000000.345633082.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	00000011.00000000.364671843.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	0000001C.00000000.372130316.000000007F380000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	0000001E.00000002.411093463.000000000325D000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	325D000
Size:	4096

Details

Name:	0000001C.00000002.377146454.0000000000F50000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F50000
Size:	4096

Details

Name:	0000001E.00000003.387612276.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000006.00000002.344525368.0000019BB1750000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	19BB1750000
Size:	4096

Details

Name:	0000001C.00000002.375888436.00000000007F0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F0000
Size:	4096

Details

Name:	0000001B.00000002.396294281.0000000000FF4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF4000
Size:	8192

Details

Name:	00000005.00000003.338630384.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.382227408.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000029.00000002.495476870.0000024274580000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24274580000
Size:	4096

Details

Name:	00000025.00000002.428063164.0000015A7FC79000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC79000
Size:	49152

Details

Name:	00000005.00000003.322649065.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	4096

Details

Name:	0000001B.00000003.391655924.000000000109E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	109E000
Size:	28672

Details

Name:	0000000D.00000000.342760696.000000007FBC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	00000005.00000003.425269097.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.310550159.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000027.00000002.452528486.00007FF53112A000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53112A000
Size:	12288

Details

Name:	00000019.00000002.394572091.000000007FD42000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD42000
Size:	4096

Details

Name:	0000001B.00000003.394789620.0000000000FF8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF8000
Size:	8192

Details

Name:	00000015.00000000.354347803.00007FF5AF071000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF071000
Size:	16384

Details

Name:	00000010.00000002.348133156.000000000127E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	8192

Details

Name:	00000005.00000003.339822682.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.337720862.0000000006320000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6320000
Size:	65536

Details

Name:	00000004.00000002.332649271.0000000000D8A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D8A000
Size:	24576

Details

Name:	00000005.00000002.557101159.0000000000FF2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF2000
Size:	4096

Details

Name:	00000019.00000003.367565205.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000011.00000000.345816430.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	00000005.00000003.322220044.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	36864

Details

Name:	00000005.00000003.337677940.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.475949473.000002427497D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497D000
Size:	20480

Details

Name:	0000001E.00000003.387772277.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	20480

Details

Name:	0000002A.00000002.473372247.00000084E277F000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E277F000
Size:	4096

Details

Name:	00000011.00000000.345946849.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	0000001B.00000002.397171861.00000000013D7000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13D7000
Size:	143360

Details

Name:	00000011.00000000.345677992.0000024B7D202000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	00000014.00000003.378864300.0000000003930000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3930000
Size:	20480

Details

Name:	00000027.00000003.447212760.000001DB2EC4B000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC4B000
Size:	20480

Details

Name:	00000005.00000003.327674124.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002D.00000000.544408434.00007DF5874C0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874C0000
Size:	12288

Details

Name:	00000006.00000002.347051840.00007FF50C4BD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C4BD000
Size:	8192

Details

Name:	00000005.00000003.365096862.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000000.00000002.306620253.0000000000DA8000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DA8000
Size:	122880

Details

Name:	00000006.00000002.345654549.0000019BB188E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB188E000
Size:	12288

Details

Name:	00000015.00000002.375028408.00007FF5AF049000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF049000
Size:	12288

Details

Name:	00000005.00000003.322159814.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000004.00000003.322302035.0000000004D4B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D4B000
Size:	4096

Details

Name:	0000000A.00000000.336884402.00000000FFF42000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF42000
Size:	4096

Details

Name:	00000005.00000003.318990330.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	53248

Details

Name:	00000011.00000000.362756789.000000784E54B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000029.00000002.497145718.00007FF501EAE000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EAE000
Size:	28672

Details

Name:	00000005.00000002.559167437.0000000004B30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B30000
Size:	167936

Details

Name:	00000027.00000002.451623701.00007FF53104F000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53104F000
Size:	12288

Details

Name:	00000000.00000002.306507824.0000000000CEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CEA000
Size:	16384

Details

Name:	0000001B.00000002.397119492.0000000001210000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1210000
Size:	69632

Details

Name:	00000029.00000002.496288166.00007FF501CD1000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501CD1000
Size:	4096

Details

Name:	0000001E.00000002.405950026.0000000000CF8000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CF8000
Size:	32768

Details

Name:	00000010.00000002.348613139.000000007FA32000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA32000
Size:	4096

Details

Name:	00000006.00000002.347160157.00007FF50C541000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C541000
Size:	16384

Details

Name:	00000005.00000003.359743258.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000029.00000003.462217961.00000242740A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242740A6000
Size:	16384

Details

Name:	00000000.00000002.306521888.0000000000CF2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CF2000
Size:	12288

Details

Name:	00000029.00000002.494870587.0000024273F80000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273F80000
Size:	16384

Details

Name:	00000029.00000002.496142505.00007FF501C47000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501C47000
Size:	12288

Details

Name:	00000029.00000000.459741327.00007DF50FBF2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBF2000
Size:	4096

Details

Name:	00000010.00000002.348306105.0000000001510000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1510000
Size:	4096

Details

Name:	0000001E.00000003.390321844.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	12288

Details

Name:	0000002D.00000003.544961666.0000020819FFC000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20819FFC000
Size:	8192

Details

Name:	00000020.00000002.413549267.00007FF4FD621000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD621000
Size:	20480

Details

Name:	00000015.00000000.354274147.00007DF5BCCD2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCD2000
Size:	4096

Details

Name:	00000010.00000002.348053033.0000000000FA6000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA6000
Size:	4096

Details

Name:	00000005.00000003.504339247.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000011.00000000.364844553.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000005.00000003.337767599.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	16384

Details

Name:	00000014.00000003.379043377.0000000003931000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3931000
Size:	16384

Details

Name:	00000027.00000002.452372739.00007FF531077000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531077000
Size:	49152

Details

Name:	00000029.00000003.481049949.0000024274985000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274985000
Size:	36864

Details

Name:	00000004.00000003.310464694.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.339847978.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.346087219.00000000013BA000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13BA000
Size:	135168

Details

Name:	00000000.00000003.301615229.0000000000E3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3F000
Size:	12288

Details

Name:	00000005.00000003.535757110.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.330648885.0000000004D1D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D1D000
Size:	20480

Details

Name:	00000029.00000002.495905771.00007DF50FC00000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FC00000
Size:	12288

Details

Name:	00000025.00000002.428847748.00007FF50DE2C000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE2C000
Size:	4096

Details

Name:	00000019.00000002.394237936.00000000066EE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	66EE000
Size:	8192

Details

Name:	00000005.00000003.325358171.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.478903282.000002427499C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499C000
Size:	32768

Details

Name:	00000020.00000002.412732611.00000052E3AFE000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3AFE000
Size:	8192

Details

Name:	00000005.00000002.555861617.0000000000CCE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CCE000
Size:	8192

Details

Name:	00000029.00000003.480137653.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000027.00000002.451544880.00007FF53104D000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53104D000
Size:	4096

Details

Name:	00000011.00000000.362825664.0000024B7C820000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000029.00000000.459763325.00007DF50FC00000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FC00000
Size:	12288

Details

Name:	00000029.00000003.482062441.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	45056

Details

Name:	00000019.00000003.375104268.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	24576

Details

Name:	00000004.00000003.311183179.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000014.00000003.363241602.00000000039E5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E5000
Size:	98304

Details

Name:	00000029.00000003.469535324.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	4096

Details

Name:	00000014.00000003.356056019.00000000039E4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E4000
Size:	4096

Details

Name:	00000019.00000002.390488479.0000000000BC0000.00000004.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	BC0000
Size:	4096

Details

Name:	00000005.00000003.416195737.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	167936

Details

Name:	00000005.00000003.320667104.0000000000E43000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E43000
Size:	45056

Details

Name:	00000005.00000003.384868173.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000002.392371241.0000000005BF0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BF0000
Size:	4096

Details

Name:	0000001C.00000000.372101289.000000007F372000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000005.00000003.515319492.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000011.00000002.554961638.0000024B7C820000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000011.00000000.345712629.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	00000019.00000003.376659973.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000005.00000003.536002670.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.380287587.0000000002370000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2370000
Size:	69632

Details

Name:	00000005.00000003.325561760.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.393328288.0000000001027000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1027000
Size:	4096

Details

Name:	00000000.00000003.289869581.0000000000E3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3E000
Size:	16384

Details

Name:	0000001B.00000003.391350057.0000000001007000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1007000
Size:	12288

Details

Name:	00000005.00000003.331830490.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.377240634.000000000399B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	399B000
Size:	8192

Details

Name:	00000015.00000002.372880011.000001C86BCF0000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C86BCF0000
Size:	4096

Details

Name:	00000010.00000002.348339243.000000000163F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	163F000
Size:	4096

Details

Name:	00000014.00000003.376827603.0000000003993000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3993000
Size:	4096

Details

Name:	00000005.00000002.557371782.0000000001080000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1080000
Size:	20480

Details

Name:	00000011.00000000.345666166.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	16384

Details

Name:	00000011.00000000.363220537.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	00000025.00000002.429130060.00007FF50DEF7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEF7000
Size:	49152

Details

Name:	00000004.00000003.321441801.0000000004D7F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D7F000
Size:	36864

Details

Name:	00000011.00000000.346045348.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	0000001B.00000002.397464749.00000000FF9B2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9B2000
Size:	4096

Details

Name:	00000005.00000003.324666291.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.495702831.0000024274972000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274972000
Size:	32768

Details

Name:	00000000.00000003.305727522.00000000074B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B1000
Size:	8192

Details

Name:	00000014.00000000.348819086.00000000011DB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.335239000.0000000004CF1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CF1000
Size:	8192

Details

Name:	00000005.00000003.329963324.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.380316589.00000000024F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24F0000
Size:	4096

Details

Name:	00000027.00000002.451357900.00007FF530FBB000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530FBB000
Size:	8192

Details

Name:	00000000.00000002.307683702.0000000007450000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7450000
Size:	4096

Details

Name:	00000004.00000000.304894851.0000000000D30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	102400

Details

Name:	00000014.00000003.375043368.0000000003A58000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A58000
Size:	28672

Details

Name:	00000011.00000000.364186736.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	00000005.00000003.332402847.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.364635328.000000000161C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161C000
Size:	135168

Details

Name:	0000002A.00000002.474138439.00007FF535FD7000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FD7000
Size:	16384

Details

Name:	00000000.00000003.289862546.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	4096

Details

Name:	0000000D.00000002.346966946.0000000003371000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3371000
Size:	45056

Details

Name:	00000029.00000002.495422319.0000024274113000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274113000
Size:	8192

Details

Name:	00000004.00000002.334813972.000000000168E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	168E000
Size:	8192

Details

Name:	0000001B.00000003.379734830.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000003.320945077.00000000053F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	65536

Details

Name:	00000020.00000002.413262593.00000239ECD08000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECD08000
Size:	24576

Details

Name:	00000014.00000003.359108587.0000000004831000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4831000
Size:	860160

Details

Name:	0000001E.00000003.390295244.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	20480

Details

Name:	0000002D.00000002.556291175.000002081A530000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2081A530000
Size:	4096

Details

Name:	00000027.00000002.450188765.00007FF530F0D000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F0D000
Size:	4096

Details

Name:	00000000.00000003.289699835.0000000000DE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE3000
Size:	81920

Details

Name:	0000001E.00000002.408686421.00000000017D0000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17D0000
Size:	12288

Details

Name:	00000005.00000003.318264150.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.496599730.00007FF501DFB000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501DFB000
Size:	8192

Details

Name:	00000005.00000003.317869377.00000000050E5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E5000
Size:	8192

Details

Name:	00000015.00000002.372662174.000001C86A29A000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A29A000
Size:	32768

Details

Name:	00000020.00000000.400500135.00007DF50B7A0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7A0000
Size:	4096

Details

Name:	0000001B.00000003.392084099.000000000107B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	107B000
Size:	8192

Details

Name:	00000019.00000002.391556886.00000000033C0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33C0000
Size:	40960

Details

Name:	00000014.00000003.377427651.000000000396E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396E000
Size:	32768

Details

Name:	0000001E.00000003.388625393.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	16384

Details

Name:	00000015.00000003.371675641.000001C86C115000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C115000
Size:	12288

Details

Name:	00000005.00000003.535773162.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.364543130.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	00000010.00000003.347128862.0000000005560000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5560000
Size:	12288

Details

Name:	00000000.00000003.300715851.0000000007413000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7413000
Size:	4096

Details

Name:	00000010.00000002.348495432.000000000303F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	303F000
Size:	4096

Details

Name:	0000002D.00000000.544533918.00007FF565751000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF565751000
Size:	8192

Details

Name:	0000001B.00000003.379712322.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000005.00000003.330166586.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.380990219.0000000006365000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6365000
Size:	131072

Details

Name:	00000004.00000003.313955824.0000000004D98000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D98000
Size:	65536

Details

Name:	0000001B.00000002.397229698.00000000023D0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23D0000
Size:	36864

Details

Name:	0000000D.00000002.346934223.0000000003360000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3360000
Size:	65536

Details

Name:	0000001C.00000003.374206189.0000000002410000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2410000
Size:	45056

Details

Name:	00000020.00000002.412792796.00000052E3DFB000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3DFB000
Size:	20480

Details

Name:	0000002D.00000002.556135153.000002081A2D0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081A2D0000
Size:	4096

Details

Name:	00000004.00000000.305380245.00000000FF6C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6C0000
Size:	4096

Details

Name:	00000004.00000002.334474560.0000000000E46000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E46000
Size:	8192

Details

Name:	00000029.00000003.477714591.0000024274F02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274F02000
Size:	397312

Details

Name:	00000019.00000002.390744116.0000000000F82000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F82000
Size:	98304

Details

Name:	00000004.00000000.305322925.00000000011B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000015.00000002.375150419.00007FF5AF061000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF061000
Size:	32768

Details

Name:	0000001E.00000002.410997731.0000000003257000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3257000
Size:	16384

Details

Name:	0000001E.00000003.391025589.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	8192

Details

Name:	0000000A.00000002.337047197.0000000001130000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000015.00000002.373767988.00007FF5AEC1F000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEC1F000
Size:	4096

Details

Name:	00000019.00000003.390230481.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000001E.00000003.388007740.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.497998021.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001C.00000000.372066687.0000000000190000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	190000
Size:	102400

Details

Name:	00000004.00000002.335124833.00000000040B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40B0000
Size:	8192

Details

Name:	00000019.00000002.391127719.0000000001820000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1820000
Size:	40960

Details

Name:	00000005.00000003.316915728.0000000000E35000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E35000
Size:	24576

Details

Name:	00000029.00000000.459712028.00007DF50FBE2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBE2000
Size:	4096

Details

Name:	00000005.00000003.321943266.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371805002.000001C86C12B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C12B000
Size:	12288

Details

Name:	0000001B.00000003.391141230.0000000000F18000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F18000
Size:	28672

Details

Name:	0000001C.00000000.372089016.000000007F370000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000005.00000002.557027467.0000000000FE2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE2000
Size:	4096

Details

Name:	0000002A.00000002.474035921.00007FF535DA9000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535DA9000
Size:	4096

Details

Name:	00000015.00000003.371709385.000001C86C110000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C110000
Size:	12288

Details

Name:	00000004.00000003.330781064.0000000004CEA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEA000
Size:	4096

Details

Name:	00000005.00000002.560216770.00000000055EE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55EE000
Size:	8192

Details

Name:	00000019.00000003.364990989.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000003.372947130.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	12288

Details

Name:	0000001B.00000003.382265079.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	0000000A.00000000.336865033.00000000FFF30000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF30000
Size:	4096

Details

Name:	00000006.00000002.345678432.0000019BB1902000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1902000
Size:	12288

Details

Name:	00000014.00000003.378974348.000000000391B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	391B000
Size:	8192

Details

Name:	00000019.00000003.369837800.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000011.00000000.362898766.0000024B7C840000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	00000029.00000003.471193782.000002427495E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427495E000
Size:	57344

Details

Name:	0000001B.00000003.386749624.0000000004789000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4789000
Size:	4096

Details

Name:	0000000D.00000002.346786825.0000000003130000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3130000
Size:	4096

Details

Name:	00000004.00000003.330881658.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000005.00000003.317922302.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	65536

Details

Name:	0000002A.00000002.474199477.00007FF53600E000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53600E000
Size:	8192

Details

Name:	00000019.00000003.370121151.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000004.00000003.310288716.0000000004CD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD1000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000019.00000003.374801331.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	40960

Details

Name:	00000005.00000003.362514309.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000029.00000003.481009598.000002427497B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497B000
Size:	77824

Details

Name:	00000005.00000003.338880112.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000002.555409392.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	0000002A.00000000.461290421.00007FF5360B1000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5360B1000
Size:	16384

Details

Name:	00000014.00000003.375222511.0000000003936000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3936000
Size:	487424

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000005.00000002.560690263.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	8192

Details

Name:	00000027.00000002.447418384.000000CC54D2E000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC54D2E000
Size:	8192

Details

Name:	0000002D.00000002.556193522.000002081A310000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2081A310000
Size:	12288

Details

Name:	00000019.00000003.370821935.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	4096

Details

Name:	00000019.00000003.366372431.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	36864

Details

Name:	00000019.00000003.369726047.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000015.00000003.371377882.000001C86C11E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C11E000
Size:	65536

Details

Name:	0000001B.00000002.396251355.0000000000F60000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F60000
Size:	4096

Details

Name:	00000005.00000003.321093687.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	24576

Details

Name:	0000001B.00000003.382491869.0000000004763000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4763000
Size:	499712

Details

Name:	00000011.00000000.345366705.000000784EA7F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7F000
Size:	4096

Details

Name:	0000001E.00000002.405528554.00000000009B0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	16384

Details

Name:	00000029.00000002.495456562.0000024274400000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24274400000
Size:	12288

Details

Name:	00000019.00000003.374628173.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	0000001B.00000000.370950298.00000000FF9A2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9A2000
Size:	4096

Details

Name:	00000029.00000002.497750279.00007FF501F7A000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F7A000
Size:	4096

Details

Name:	0000001E.00000003.391129030.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	49152

Details

Name:	00000005.00000003.317635825.0000000000E19000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E19000
Size:	20480

Details

Name:	00000025.00000002.428957585.00007FF50DEB7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEB7000
Size:	4096

Details

Name:	00000019.00000003.373078942.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	61440

Details

Name:	00000005.00000003.327563924.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000000.354338296.00007FF595C52000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C52000
Size:	4096

Details

Name:	00000029.00000003.469516374.000002427499D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499D000
Size:	28672

Details

Name:	00000020.00000002.413349538.00000239ED402000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ED402000
Size:	4096

Details

Name:	0000001C.00000002.375933424.0000000000804000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	804000
Size:	4096

Details

Name:	0000002A.00000002.473915278.00000270A9510000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A9510000
Size:	4096

Details

Name:	00000029.00000003.473619636.00000242749AC000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749AC000
Size:	4096

Details

Name:	00000000.00000002.307532533.000000000321E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	321E000
Size:	8192

Details

Name:	00000020.00000002.413811856.00007FF4FDA4D000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA4D000
Size:	4096

Details

Name:	00000029.00000002.496080545.00007FF501B54000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501B54000
Size:	8192

Details

Name:	0000001B.00000003.393758356.0000000001022000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1022000
Size:	4096

Details

Name:	00000005.00000002.560369054.000000000600D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	600D000
Size:	12288

Details

Name:	0000001B.00000003.392003693.000000000100C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100C000
Size:	40960

Details

Name:	0000001B.00000002.396268899.0000000000FE0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	FE0000
Size:	12288

Details

Name:	00000005.00000003.384445478.0000000006370000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6370000
Size:	131072

Details

Name:	00000029.00000002.497102669.00007FF501EA7000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EA7000
Size:	16384

Details

Name:	00000005.00000003.553064117.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000005.00000002.559689473.0000000005143000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5143000
Size:	12288

Details

Name:	00000029.00000002.496987132.00007FF501E8F000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E8F000
Size:	12288

Details

Name:	00000014.00000003.379293614.000000000392E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392E000
Size:	8192

Details

Name:	0000001E.00000003.387979791.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000029.00000003.481516299.00000242749CA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749CA000
Size:	61440

Details

Name:	00000020.00000002.413362895.00007DF409670000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF409670000
Size:	20480

Details

Name:	00000006.00000002.346665065.00007FF50C449000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C449000
Size:	8192

Details

Name:	00000005.00000003.517805279.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	0000001E.00000002.412871958.0000000005A10000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A10000
Size:	65536

Details

Name:	0000001B.00000003.391906016.0000000001074000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1074000
Size:	24576

Details

Name:	0000001B.00000003.392024728.0000000001057000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1057000
Size:	57344

Details

Name:	00000005.00000003.338268034.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002A.00000002.474312888.00007FF5360A5000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5360A5000
Size:	16384

Details

Name:	00000029.00000002.494719832.0000024273E50000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273E50000
Size:	102400

Details

Name:	00000005.00000003.321372316.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	65536

Details

Name:	00000005.00000003.318809058.0000000000E44000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E44000
Size:	49152

Details

Name:	00000029.00000003.470960608.0000024274953000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274953000
Size:	102400

Details

Name:	00000004.00000002.335150866.0000000004180000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4180000
Size:	16384

Details

Name:	00000005.00000003.425337708.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.389045381.00000000015A7000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7000
Size:	16384

Details

Name:	00000005.00000003.425244124.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.497313737.00007FF501EDE000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EDE000
Size:	4096

Details

Name:	0000000A.00000000.336888500.00000000FFF50000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF50000
Size:	12288

Details

Name:	00000005.00000002.557670527.000000000296D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	296D000
Size:	12288

Details

Name:	00000015.00000003.371906282.000001C86A33C000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A33C000
Size:	8192

Details

Name:	00000019.00000002.391096742.0000000001813000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1813000
Size:	4096

Details

Name:	0000001E.00000003.387584425.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000000.00000002.307733363.000000007F012000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F012000
Size:	4096

Details

Name:	00000000.00000000.289159393.000000007F030000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F030000
Size:	12288

Details

Name:	00000005.00000003.321674089.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.316284079.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	180224

Details

Name:	00000005.00000002.555749379.0000000000B80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B80000
Size:	8192

Details

Name:	0000002A.00000002.474182873.00007FF536003000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF536003000
Size:	24576

Details

Name:	0000001B.00000002.397444134.00000000FF9A2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9A2000
Size:	4096

Details

Name:	00000020.00000002.414262203.00007FF4FDB2A000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB2A000
Size:	12288

Details

Name:	0000001E.00000003.388144232.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.459659516.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	00000029.00000003.480382973.0000024274980000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274980000
Size:	57344

Details

Name:	0000001E.00000003.387620395.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.371667207.0000000005C10000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C10000
Size:	32768

Details

Name:	00000029.00000002.496038818.00007FF501A67000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501A67000
Size:	32768

Details

Name:	00000015.00000003.371949540.000001C86A2A2000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A2A2000
Size:	126976

Details

Name:	00000006.00000002.347072349.00007FF50C519000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C519000
Size:	12288

Details

Name:	00000010.00000002.348236010.00000000014CE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14CE000
Size:	8192

Details

Name:	00000000.00000002.306493689.0000000000CE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CE3000
Size:	12288

Details

Name:	00000020.00000002.413723714.00007FF4FD9AC000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9AC000
Size:	4096

Details

Name:	00000005.00000003.317559612.0000000000E21000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E21000
Size:	106496

Details

Name:	0000001B.00000002.397206160.0000000001FCE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FCE000
Size:	8192

Details

Name:	00000005.00000002.560474350.00000000061A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	61A0000
Size:	36864

Details

Name:	00000005.00000003.321964517.0000000005450000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5450000
Size:	12288

Details

Name:	00000020.00000002.413684793.00007FF4FD995000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD995000
Size:	20480

Details

Name:	00000029.00000002.495974484.00007FF5017D3000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5017D3000
Size:	16384

Details

Name:	00000014.00000003.376573574.00000000039A2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39A2000
Size:	45056

Details

Name:	00000011.00000000.362782728.000000784EA7F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7F000
Size:	4096

Details

Name:	0000001C.00000002.375824890.00000000006C5000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6C5000
Size:	8192

Details

Name:	0000000D.00000002.346062890.00000000013B0000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13B0000
Size:	32768

Details

Name:	00000020.00000000.400568439.00007DF50B7B2000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7B2000
Size:	4096

Details

Name:	00000011.00000000.345837833.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	00000014.00000002.380246196.0000000001D6E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D6E000
Size:	8192

Details

Name:	00000014.00000002.380044393.00000000013F0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13F0000
Size:	4096

Details

Name:	0000001E.00000003.387451793.00000000015A4000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A4000
Size:	8192

Details

Name:	00000027.00000002.449252932.000001DB2EC6E000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC6E000
Size:	40960

Details

Name:	00000006.00000000.331574626.00007DF51A1C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1C0000
Size:	12288

Details

Name:	00000015.00000003.355497158.000001C86C11B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C11B000
Size:	12288

Details

Name:	00000014.00000002.379907872.00000000011D7000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11D7000
Size:	12288

Details

Name:	00000027.00000002.451392159.00007FF530FC5000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530FC5000
Size:	4096

Details

Name:	00000029.00000003.475276487.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000010.00000002.348115884.0000000001160000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1160000
Size:	24576

Details

Name:	00000005.00000002.559818844.0000000005190000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5190000
Size:	8192

Details

Name:	00000020.00000002.414183140.00007FF4FDABD000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDABD000
Size:	8192

Details

Name:	00000029.00000003.473281370.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	65536

Details

Name:	00000029.00000003.475422325.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000015.00000002.372438950.00000086CBBFF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBBFF000
Size:	4096

Details

Name:	0000001E.00000000.385226596.000000007FBD0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBD0000
Size:	4096

Details

Name:	00000005.00000002.558858060.0000000002EBB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EBB000
Size:	1134592

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000014.00000002.380235831.0000000001599000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1599000
Size:	8192

Details

Name:	00000029.00000003.493758379.0000024274057000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274057000
Size:	16384

Details

Name:	00000005.00000003.318898334.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	65536

Details

Name:	00000014.00000003.379091646.0000000003931000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3931000
Size:	16384

Details

Name:	00000025.00000002.429065385.00007FF50DEE3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEE3000
Size:	12288

Details

Name:	00000005.00000003.321728385.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	36864

Details

Name:	00000019.00000000.362951780.000000007FD60000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD60000
Size:	12288

Details

Name:	00000015.00000002.374139616.00007FF5AEDB9000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEDB9000
Size:	4096

Details

Name:	00000027.00000002.447709423.000001DB2EBA0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EBA0000
Size:	4096

Details

Name:	00000005.00000003.316027292.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	0000001C.00000003.374271010.0000000002400000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2400000
Size:	8192

Details

Name:	00000005.00000002.559359894.0000000005000000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5000000
Size:	16384

Details

Name:	00000010.00000001.344865967.0000000000D30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	4096

Details

Name:	0000002A.00000002.473956843.00007DF543D20000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D20000
Size:	4096

Details

Name:	00000020.00000002.413671931.00007FF4FD94F000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD94F000
Size:	8192

Details

Name:	00000004.00000002.334820057.0000000001690000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1690000
Size:	16384

Details

Name:	00000004.00000002.334888751.00000000018D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18D0000
Size:	4096

Details

Name:	00000015.00000002.373974610.00007FF5AECF5000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AECF5000
Size:	8192

Details

Name:	0000001E.00000003.388642181.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	53248

Details

Name:	00000029.00000002.495720251.000002427497B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497B000
Size:	8192

Details

Name:	00000005.00000003.519501837.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000025.00000000.415859869.0000015A7FAB0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FAB0000
Size:	102400

Details

Name:	00000000.00000002.306276296.0000000000250000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	250000
Size:	4096

Details

Name:	00000005.00000003.321555915.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	45056

Details

Name:	0000002A.00000002.473939656.00007DF543D10000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D10000
Size:	4096

Details

Name:	00000005.00000003.321227057.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	28672

Details

Name:	00000029.00000003.480205762.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	4096

Details

Name:	0000001E.00000002.406222361.0000000000D22000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	D22000
Size:	98304

Details

Name:	00000014.00000002.380582817.000000000442E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	442E000
Size:	8192

Details

Name:	00000005.00000002.559725399.0000000005160000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5160000
Size:	4096

Details

Name:	0000001E.00000003.388375512.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	4096

Details

Name:	00000011.00000000.363255905.0000024B7CA39000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA39000
Size:	4096

Details

Name:	00000005.00000002.555183982.00000000004F5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F5000
Size:	45056

Details

Name:	00000011.00000002.556255729.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	00000005.00000003.498361358.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.439015323.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000004.00000003.320799355.0000000004CEB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEB000
Size:	49152

Details

Name:	00000000.00000002.307606740.0000000004FCE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FCE000
Size:	8192

Details

Name:	00000005.00000003.340387522.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371494434.000001C86C105000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C105000
Size:	81920

Details

Name:	00000014.00000002.380433068.0000000003996000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3996000
Size:	4096

Details

Name:	00000025.00000002.427824184.0000015A7FAB0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FAB0000
Size:	102400

Details

Name:	00000029.00000003.480166655.0000024274980000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274980000
Size:	57344

Details

Name:	0000002D.00000002.556214678.000002081A315000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2081A315000
Size:	12288

Details

Name:	00000015.00000002.374485797.00007FF5AEF79000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF79000
Size:	8192

Details

Name:	00000011.00000002.556684838.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	00000019.00000003.364706607.0000000001672000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1672000
Size:	8192

Details

Name:	0000002D.00000002.555519403.0000020819F80000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20819F80000
Size:	8192

Details

Name:	00000020.00000002.414297544.00007FF4FDB3A000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB3A000
Size:	4096

Details

Name:	00000005.00000003.340395752.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.366221719.00000000059D5000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D5000
Size:	8192

Details

Name:	0000000D.00000002.346001114.0000000001067000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1067000
Size:	4096

Details

Name:	00000014.00000002.379445314.00000000009B0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9B0000
Size:	4096

Details

Name:	0000002D.00000002.556669057.00007DF5874B0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874B0000
Size:	4096

Details

Name:	00000004.00000003.331169091.000000000418E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418E000
Size:	4096

Details

Name:	00000005.00000003.321082215.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.321467811.0000000005430000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5430000
Size:	4096

Details

Name:	00000015.00000002.374688312.00007FF5AEFA7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFA7000
Size:	49152

Details

Name:	0000002D.00000002.557491727.00007FF579819000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579819000
Size:	12288

Details

Name:	00000020.00000002.414139581.00007FF4FDA9E000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA9E000
Size:	4096

Details

Name:	00000005.00000003.507809972.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000005.00000003.337531720.00000000061B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	61B0000
Size:	8192

Details

Name:	00000027.00000000.435793186.00007DF53EDA0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDA0000
Size:	4096

Details

Name:	00000005.00000003.324921649.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.331322367.000000000418C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418C000
Size:	4096

Details

Name:	00000005.00000003.370129924.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	135168

Details

Name:	00000005.00000003.337481846.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	20480

Details

Name:	0000001E.00000003.387264288.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001B.00000002.396834464.0000000001131000.00000020.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000011.00000000.364831531.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	0000001B.00000003.393534001.0000000000FFA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FFA000
Size:	12288

Details

Name:	00000004.00000002.334762568.00000000011DB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000027.00000002.452438284.00007FF5310BA000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5310BA000
Size:	8192

Details

Name:	00000005.00000003.316160520.0000000000E27000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E27000
Size:	69632

Details

Name:	00000029.00000002.496634578.00007FF501E05000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E05000
Size:	4096

Details

Name:	00000005.00000003.320657893.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000005.00000002.557201752.000000000105E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	105E000
Size:	8192

Details

Name:	0000001E.00000003.388415705.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	65536

Details

Name:	00000005.00000002.555085833.00000000001D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	4096

Details

Name:	00000011.00000000.363027339.0000024B7C860000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	00000004.00000003.330940275.0000000004CE8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE8000
Size:	4096

Details

Name:	0000002A.00000003.472780833.00000270A8EA3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8EA3000
Size:	4096

Details

Name:	00000005.00000003.317493485.0000000000E1E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	8192

Details

Name:	00000029.00000002.495259538.00000242740BB000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740BB000
Size:	36864

Details

Name:	00000020.00000002.414168313.00007FF4FDABA000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDABA000
Size:	8192

Details

Name:	00000011.00000000.345492247.0000024B7C870000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	00000014.00000003.379144869.0000000003916000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3916000
Size:	4096

Details

Name:	0000001E.00000003.391224155.0000000005BD5000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD5000
Size:	12288

Details

Name:	0000000D.00000002.347071645.00000000054CE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54CE000
Size:	8192

Details

Name:	00000005.00000003.337831477.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	16384

Details

Name:	00000015.00000002.372584531.000001C86A240000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A240000
Size:	12288

Details

Name:	00000019.00000003.376414808.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	65536

Details

Name:	0000002A.00000002.473441639.00000084E2B7E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E2B7E000
Size:	8192

Details

Name:	0000002A.00000002.473886790.00000270A9390000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A9390000
Size:	69632

Details

Name:	00000020.00000002.413379506.00007DF50B7A0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7A0000
Size:	4096

Details

Name:	0000000A.00000000.336765151.0000000000B60000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	102400

Details

Name:	00000020.00000002.413112229.00000239ECC3C000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC3C000
Size:	53248

Details

Name:	00000005.00000003.497847268.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	167936

Details

Name:	00000004.00000003.310511418.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	4096

Details

Name:	00000004.00000003.330998603.0000000004CE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE2000
Size:	4096

Details

Name:	0000002D.00000002.556611442.00007DF485370000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF485370000
Size:	20480

Details

Name:	00000014.00000003.378495608.000000000392E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392E000
Size:	32768

Details

Name:	00000014.00000003.378608283.000000000391E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	391E000
Size:	8192

Details

Name:	00000005.00000003.339133184.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.320753169.0000000004CF7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CF7000
Size:	20480

Details

Name:	00000005.00000003.523686954.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000003.475162794.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000019.00000003.376036123.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	4096

Details

Name:	00000014.00000002.380590460.000000000482F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	482F000
Size:	4096

Details

Name:	00000000.00000003.305565253.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	8192

Details

Name:	00000005.00000003.337852074.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	40960

Details

Name:	0000002D.00000002.554946297.0000007918F7E000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7918F7E000
Size:	8192

Details

Name:	0000001B.00000003.391775706.000000000101C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101C000
Size:	8192

Details

Name:	00000004.00000002.334839015.00000000016D0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16D0000
Size:	4096

Details

Name:	00000014.00000003.378311595.0000000003952000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3952000
Size:	12288

Details

Name:	00000019.00000003.364513385.0000000001678000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1678000
Size:	20480

Details

Name:	0000000D.00000002.346354833.000000000181D000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	181D000
Size:	4096

Details

Name:	00000029.00000002.495562485.0000024274900000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274900000
Size:	81920

Details

Name:	00000005.00000002.561105220.000000007F460000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F460000
Size:	20480

Details

Name:	0000001B.00000003.395179596.000000000100E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	00000029.00000003.480278454.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	4096

Details

Name:	0000001E.00000002.412628538.00000000054A0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000029.00000002.494447295.000000F17C37B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17C37B000
Size:	20480

Details

Name:	00000005.00000003.317982518.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	36864

Details

Name:	00000004.00000003.320782139.0000000004CE3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE3000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000005.00000002.559385212.0000000005005000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5005000
Size:	16384

Details

Name:	0000001B.00000002.396282715.0000000000FF0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000001B.00000003.391956405.0000000001076000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1076000
Size:	16384

Details

Name:	00000025.00000002.428246446.0000015A7FE00000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FE00000
Size:	4096

Details

Name:	00000005.00000003.337428924.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	28672

Details

Name:	0000000D.00000000.342619380.000000007FBA0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	0000001B.00000003.392648453.0000000001005000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1005000
Size:	8192

Details

Name:	00000020.00000002.413996169.00007FF4FDA67000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA67000
Size:	16384

Details

Name:	00000014.00000002.380192315.0000000001570000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1570000
Size:	24576

Details

Name:	0000001B.00000003.392753829.0000000001032000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1032000
Size:	12288

Details

Name:	00000004.00000003.330691684.0000000004CF6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CF6000
Size:	4096

Details

Name:	0000001E.00000003.386711661.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000015.00000002.374827078.00007FF5AEFEA000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFEA000
Size:	8192

Details

Name:	0000001E.00000002.412704243.000000000596F000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	596F000
Size:	4096

Details

Name:	00000004.00000003.331280255.0000000004D03000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D03000
Size:	4096

Details

Name:	0000002A.00000003.472816862.00000270A8E86000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E86000
Size:	36864

Details

Name:	00000014.00000002.380364098.0000000003932000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3932000
Size:	4096

Details

Name:	0000002A.00000003.472888153.00000270A8E90000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E90000
Size:	40960

Details

Name:	0000002D.00000002.555428911.0000020819F50000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20819F50000
Size:	12288

Details

Name:	00000019.00000003.376381377.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	16384

Details

Name:	00000027.00000002.450222924.00007FF530F4F000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F4F000
Size:	8192

Details

Name:	00000004.00000003.315865038.0000000004DC1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC1000
Size:	4096

Details

Name:	00000005.00000003.340522740.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.378586409.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	00000005.00000003.444301324.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000014.00000003.358858355.0000000004873000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4873000
Size:	499712

Details

Name:	00000011.00000000.345432127.0000024B7C830000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	00000005.00000003.320481756.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	24576

Details

Name:	0000001E.00000003.390018312.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	0000001E.00000003.390936099.00000000015A7000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7000
Size:	16384

Details

Name:	00000011.00000002.556226686.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000019.00000003.364522264.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	40960

Details

Name:	00000025.00000002.428269537.0000015A80002000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A80002000
Size:	4096

Details

Name:	00000019.00000002.391605842.00000000033E0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33E0000
Size:	16384

Details

Name:	00000010.00000002.348488037.0000000002F30000.00000040.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000001E.00000003.387817431.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	32768

Details

Name:	00000027.00000002.447466833.000000CC550FB000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC550FB000
Size:	20480

Details

Name:	00000029.00000002.494822605.0000024273E70000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273E70000
Size:	12288

Details

Name:	00000005.00000003.318207995.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000005.00000002.560958383.000000000693C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	693C000
Size:	16384

Details

Name:	0000002D.00000000.544304985.0000020819F30000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20819F30000
Size:	102400

Details

Name:	00000019.00000002.392043499.000000000550C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	550C000
Size:	16384

Details

Name:	00000006.00000000.331484320.00007DF51A1A2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1A2000
Size:	4096

Details

Name:	00000029.00000003.481904774.0000024274983000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274983000
Size:	8192

Details

Name:	00000014.00000003.359973485.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000019.00000003.366612168.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000014.00000002.379890005.00000000011C2000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C2000
Size:	20480

Details

Name:	0000000D.00000002.346274771.00000000017FF000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FF000
Size:	4096

Details

Name:	00000029.00000002.497497593.00007FF501F52000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F52000
Size:	12288

Details

Name:	00000029.00000003.475145173.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000005.00000002.560869755.00000000067C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67C0000
Size:	4096

Details

Name:	0000001B.00000002.397432860.00000000FF9A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9A0000
Size:	4096

Details

Name:	00000005.00000003.338010667.0000000006340000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6340000
Size:	4096

Details

Name:	00000014.00000002.380552680.0000000003B00000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3B00000
Size:	8192

Details

Name:	0000002A.00000000.461114721.00000270A8DE0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A8DE0000
Size:	102400

Details

Name:	0000001E.00000003.387335540.00000000015A2000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A2000
Size:	4096

Details

Name:	00000005.00000002.559749198.0000000005170000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5170000
Size:	4096

Details

Name:	00000005.00000003.536267552.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002D.00000002.557029506.00007FF5793EA000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5793EA000
Size:	4096

Details

Name:	00000027.00000002.450234879.00007FF530F95000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F95000
Size:	20480

Details

Name:	00000005.00000003.321486061.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	4096

Details

Name:	00000014.00000003.379028761.000000000392E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392E000
Size:	8192

Details

Name:	0000001E.00000003.391191585.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	16384

Details

Name:	00000014.00000003.378729531.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	00000004.00000003.313933957.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	0000001B.00000002.396386061.000000000104B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	104B000
Size:	12288

Details

Name:	0000001E.00000003.389500366.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	49152

Details

Name:	00000025.00000002.427648699.0000001631F7B000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1631F7B000
Size:	20480

Details

Name:	00000019.00000002.391639923.00000000033F0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33F0000
Size:	65536

Details

Name:	00000005.00000003.339690089.0000000004B64000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B64000
Size:	4096

Details

Name:	0000001B.00000000.370415126.00000000005D0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	5D0000
Size:	102400

Details

Name:	0000002A.00000002.474337135.00007FF5360AA000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5360AA000
Size:	4096

Details

Name:	00000000.00000003.305570112.0000000000E85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E85000
Size:	61440

Details

Name:	00000005.00000003.322184130.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	49152

Details

Name:	00000005.00000003.340349137.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.370077724.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000002.560431979.000000000615D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	615D000
Size:	12288

Details

Name:	00000015.00000003.355516751.000001C86C111000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C111000
Size:	28672

Details

Name:	0000001E.00000002.412938770.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	57344

Details

Name:	0000002A.00000002.474245830.00007FF536089000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF536089000
Size:	12288

Details

Name:	00000029.00000003.473253258.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	147456

Details

Name:	00000010.00000002.348190459.00000000012C5000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	12C5000
Size:	180224

Details

Name:	00000005.00000002.559908725.00000000051E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51E0000
Size:	65536

Details

Name:	00000014.00000002.380444005.000000000399B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	399B000
Size:	8192

Details

Name:	0000001E.00000002.406452442.0000000001520000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1520000
Size:	16384

Details

Name:	00000019.00000003.364420805.0000000001454000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1454000
Size:	4096

Details

Name:	0000001C.00000002.375300451.00000000004F9000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	28672

Details

Name:	00000005.00000000.315366302.000000007F562000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F562000
Size:	4096

Details

Name:	00000004.00000002.334756098.00000000011D7000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11D7000
Size:	12288

Details

Name:	00000014.00000003.377937124.0000000003942000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3942000
Size:	131072

Details

Name:	0000001E.00000002.413060545.0000000005A70000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A70000
Size:	4096

Details

Name:	0000001B.00000003.392322833.0000000001049000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1049000
Size:	20480

Details

Name:	00000010.00000002.348285725.00000000014F4000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14F4000
Size:	24576

Details

Name:	00000025.00000002.428205366.0000015A7FD08000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FD08000
Size:	24576

Details

Name:	0000001E.00000002.411599558.0000000003280000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3280000
Size:	4096

Details

Name:	00000011.00000000.345694988.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000019.00000003.366166214.000000000166F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166F000
Size:	12288

Details

Name:	00000004.00000002.335266084.0000000004D71000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D71000
Size:	8192

Details

Name:	00000005.00000003.321710662.0000000005430000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5430000
Size:	65536

Details

Name:	00000005.00000002.559871055.00000000051D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	51D0000
Size:	8192

Details

Name:	0000002A.00000002.473389021.00000084E27FF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E27FF000
Size:	4096

Details

Name:	0000002A.00000003.473120887.00000270A8E9B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E9B000
Size:	28672

Details

Name:	00000005.00000003.384083850.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.394970944.000000000102A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	00000000.00000003.300593720.0000000007444000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7444000
Size:	8192

Details

Name:	0000002A.00000002.473786584.00000270A8EA3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8EA3000
Size:	4096

Details

Name:	00000005.00000003.318125576.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000019.00000002.390917111.00000000015D9000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15D9000
Size:	135168

Details

Name:	00000011.00000002.555992270.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	00000029.00000002.496024160.00007FF501A61000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501A61000
Size:	20480

Details

Name:	00000029.00000002.497283078.00007FF501ED3000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501ED3000
Size:	24576

Details

Name:	00000011.00000000.345548879.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	00000005.00000002.559005594.0000000003A31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3A31000
Size:	28672

Details

Name:	0000001B.00000003.394143642.000000000100E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	0000001B.00000003.382324157.00000000010C3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C3000
Size:	73728

Details

Name:	0000001B.00000003.379432035.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000029.00000002.496228672.00007FF501CC4000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501CC4000
Size:	4096

Details

Name:	00000019.00000003.364693267.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	49152

Details

Name:	00000005.00000003.372421614.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	135168

Details

Name:	00000027.00000002.448934341.000001DB2EC2A000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC2A000
Size:	69632

Details

Name:	00000005.00000003.425228408.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.321177128.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	20480

Details

Name:	00000016.00000002.358735484.00000000FF8A2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8A2000
Size:	4096

Details

Name:	0000001B.00000001.371414519.0000000001130000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000019.00000003.366078984.0000000001680000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1680000
Size:	40960

Details

Name:	0000001B.00000003.382344223.00000000010B5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10B5000
Size:	57344

Details

Name:	0000001E.00000002.412918408.0000000005A20000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A20000
Size:	65536

Details

Name:	00000004.00000002.334606721.0000000000E59000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E59000
Size:	4096

Details

Name:	0000001E.00000000.385185453.000000007FBC0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	4096

Details

Name:	00000005.00000003.319725403.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.338754755.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.339270782.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.316129885.0000000000DF8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DF8000
Size:	135168

Details

Name:	00000005.00000003.319297422.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	65536

Details

Name:	00000004.00000003.330674422.0000000004D14000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D14000
Size:	4096

Details

Name:	0000001E.00000002.412793191.0000000005A00000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A00000
Size:	16384

Details

Name:	00000005.00000003.498336976.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.392255159.000000000104F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104F000
Size:	28672

Details

Name:	00000020.00000002.413622295.00007FF4FD8F1000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD8F1000
Size:	8192

Details

Name:	0000001E.00000002.406624612.0000000001550000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1550000
Size:	32768

Details

Name:	00000014.00000003.363643188.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000010.00000003.346956680.0000000005543000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5543000
Size:	53248

Details

Name:	0000001B.00000003.392340215.000000000101F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101F000
Size:	8192

Details

Name:	0000001B.00000002.397024987.00000000011C0000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	00000015.00000002.373749887.00007FF5AEBE8000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEBE8000
Size:	8192

Details

Name:	00000029.00000002.495241622.00000242740B2000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740B2000
Size:	24576

Details

Name:	00000027.00000002.452387658.00007FF53108B000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53108B000
Size:	12288

Details

Name:	00000019.00000002.394159801.00000000065EE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	65EE000
Size:	8192

Details

Name:	00000015.00000002.374470607.00007FF5AEF76000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF76000
Size:	4096

Details

Name:	0000002D.00000002.556499513.000002081AE70000.00000002.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2081AE70000
Size:	4096

Details

Name:	00000011.00000000.364382437.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	00000005.00000003.318588738.0000000005131000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5131000
Size:	61440

Details

Name:	00000029.00000002.496558651.00007FF501DDB000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501DDB000
Size:	24576

Details

Name:	00000015.00000002.373645419.00007FF5AEAEC000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEAEC000
Size:	8192

Details

Name:	0000001E.00000003.391088853.0000000005D50000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	12288

Details

Name:	00000029.00000002.496656764.00007FF501E2F000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E2F000
Size:	4096

Details

Name:	0000001B.00000003.394740770.0000000000FF6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF6000
Size:	4096

Details

Name:	00000005.00000003.434578874.000000000636D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	636D000
Size:	4096

Details

Name:	00000029.00000002.495003546.000002427403C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2427403C000
Size:	61440

Details

Name:	00000029.00000002.496002702.00007FF5018EB000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5018EB000
Size:	4096

Details

Name:	00000029.00000002.494971811.0000024274029000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274029000
Size:	73728

Details

Name:	00000000.00000003.300064544.00000000074B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B1000
Size:	8192

Details

Name:	00000005.00000000.315376088.000000007F570000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F570000
Size:	4096

Details

Name:	00000005.00000003.340437567.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.330286906.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000029.00000003.469005257.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	122880

Details

Name:	00000025.00000002.427760155.0000015A00180000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A00180000
Size:	4096

Details

Name:	00000011.00000000.364712003.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000027.00000002.449899093.00007DF53EDA2000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDA2000
Size:	4096

Details

Name:	00000029.00000003.471279764.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	12288

Details

Name:	00000025.00000002.429083465.00007FF50DEEE000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEEE000
Size:	28672

Details

Name:	00000019.00000003.374050151.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000000.00000003.301641548.0000000000E0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000029.00000003.471215060.0000024274971000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274971000
Size:	20480

Details

Name:	00000005.00000003.356703057.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000029.00000002.496939076.00007FF501E89000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E89000
Size:	8192

Details

Name:	0000001E.00000003.389138166.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	49152

Details

Name:	00000019.00000002.391616402.00000000033E5000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33E5000
Size:	12288

Details

Name:	00000019.00000003.364824182.0000000001672000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1672000
Size:	12288

Details

Name:	00000004.00000003.310519678.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000019.00000002.391188288.000000000183A000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	183A000
Size:	4096

Details

Name:	0000001E.00000002.405895861.0000000000A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	4096

Details

Name:	00000015.00000000.354248481.000001C86A220000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A220000
Size:	102400

Details

Name:	00000014.00000003.378805871.0000000003939000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3939000
Size:	8192

Details

Name:	00000006.00000002.346517105.00007FF50C39B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C39B000
Size:	24576

Details

Name:	00000005.00000003.317768926.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	0000002A.00000002.473975045.00007DF543D30000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D30000
Size:	12288

Details

Name:	00000005.00000003.335827465.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371914842.000001C86A296000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A296000
Size:	12288

Details

Name:	00000029.00000002.496613013.00007FF501E01000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E01000
Size:	12288

Details

Name:	00000014.00000003.376774767.0000000003985000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3985000
Size:	28672

Details

Name:	0000001B.00000003.393177796.0000000001027000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1027000
Size:	20480

Details

Name:	0000001B.00000003.379808471.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	0000001C.00000003.374528382.0000000002440000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2440000
Size:	12288

Details

Name:	00000004.00000003.322752770.0000000004D46000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D46000
Size:	20480

Details

Name:	00000010.00000002.348414135.00000000016C0000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16C0000
Size:	4096

Details

Name:	00000005.00000003.318168620.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000029.00000003.467501257.000002427498D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427498D000
Size:	4096

Details

Name:	00000005.00000002.557921444.0000000002AB5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB5000
Size:	1216512

Details

Name:	00000004.00000003.314607186.0000000004DBC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DBC000
Size:	8192

Details

Name:	00000011.00000000.345659962.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	00000029.00000002.494343991.000000F17BFFF000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BFFF000
Size:	4096

Details

Name:	00000029.00000003.469136142.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	126976

Details

Name:	00000014.00000003.376490842.000000000393F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	393F000
Size:	8192

Details

Name:	0000001E.00000003.389300441.0000000005B61000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B61000
Size:	57344

Details

Name:	00000004.00000003.322683555.0000000004D44000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D44000
Size:	28672

Details

Name:	00000029.00000003.480152677.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	12288

Details

Name:	0000001C.00000000.372057894.000000000015A000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A000
Size:	4096

Details

Name:	00000015.00000002.373141082.00007DF4BABA0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BABA0000
Size:	20480

Details

Name:	00000005.00000002.556160116.0000000000DE7000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DE7000
Size:	110592

Details

Name:	00000014.00000003.376698412.000000000399A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	399A000
Size:	12288

Details

Name:	00000027.00000002.447618952.000001DB2EB50000.00000004.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1DB2EB50000
Size:	4096

Details

Name:	00000005.00000003.503662287.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000015.00000003.371779928.000001C86C108000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C108000
Size:	28672

Details

Name:	0000001E.00000002.413231944.0000000005C80000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C80000
Size:	733184

Details

Name:	00000005.00000003.339832931.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.374529022.00007FF5AEF83000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF83000
Size:	28672

Details

Name:	00000011.00000000.364064004.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000004.00000002.334741902.00000000011C1000.00000008.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C1000
Size:	4096

Details

Name:	00000020.00000000.400663030.00007FF4FDB41000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB41000
Size:	16384

Details

Name:	00000005.00000003.318217429.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000003.300931357.0000000007351000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7351000
Size:	397312

Details

Name:	0000001E.00000003.403425115.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	20480

Details

Name:	00000005.00000002.557122497.0000000000FF7000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FF7000
Size:	4096

Details

Name:	0000000D.00000002.346174223.00000000015C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15C0000
Size:	16384

Details

Name:	00000029.00000002.494674737.0000024273E30000.00000004.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24273E30000
Size:	4096

Details

Name:	00000011.00000000.345826087.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	00000005.00000003.498033947.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.377333212.0000000005D75000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	12288

Details

Name:	00000014.00000003.374937841.0000000003921000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3921000
Size:	573440

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000005.00000003.339238123.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.346289594.0000000001813000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1813000
Size:	4096

Details

Name:	00000005.00000003.535570502.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000029.00000003.480619375.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	8192

Details

Name:	00000005.00000002.559940917.0000000005330000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5330000
Size:	733184

Details

Name:	00000011.00000000.363572723.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	0000001C.00000000.372147680.000000007F382000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	0000002D.00000002.556257040.000002081A320000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081A320000
Size:	4096

Details

Name:	00000020.00000002.412772657.00000052E3CFE000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3CFE000
Size:	8192

Details

Name:	0000001E.00000003.390725154.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.321660465.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.340358401.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.498141114.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001C.00000002.375234125.00000000003FB000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3FB000
Size:	4096

Details

Name:	00000029.00000003.467073081.0000024274E03000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E03000
Size:	225280

Details

Name:	00000005.00000003.355533096.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000014.00000003.378845353.0000000003917000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3917000
Size:	12288

Details

Name:	0000001C.00000002.376734259.0000000000AB1000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AB1000
Size:	40960

Details

Name:	0000001E.00000003.388055736.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.374128881.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	00000011.00000002.554987870.0000024B7C830000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	00000004.00000003.320793750.000000000418D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418D000
Size:	8192

Details

Name:	00000014.00000002.379919564.00000000011DB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	0000001E.00000002.412688978.000000000596C000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	596C000
Size:	4096

Details

Name:	00000027.00000002.449675800.000001DB2ED13000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2ED13000
Size:	12288

Details

Name:	0000001B.00000003.379673759.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000010.00000002.348503990.0000000003041000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	40960

Details

Name:	0000001C.00000002.376269109.0000000000840000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	840000
Size:	32768

Details

Name:	0000001C.00000002.374923978.0000000000180000.00000004.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	180000
Size:	4096

Details

Name:	00000027.00000002.452552026.00007FF53113A000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53113A000
Size:	4096

Details

Name:	00000015.00000002.374715776.00007FF5AEFBB000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFBB000
Size:	12288

Details

Name:	00000029.00000003.467484020.0000024274988000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274988000
Size:	16384

Details

Name:	00000019.00000002.393680241.0000000005DAE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DAE000
Size:	8192

Details

Name:	0000001C.00000002.377167847.00000000023F0000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	23F0000
Size:	8192

Details

Name:	00000005.00000003.498564926.0000000004B5C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5C000
Size:	61440

Details

Name:	00000027.00000002.447524731.000000CC5527E000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC5527E000
Size:	8192

Details

Name:	00000005.00000003.525436005.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000001E.00000003.387670588.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	16384

Details

Name:	00000004.00000003.325991405.0000000004D32000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D32000
Size:	8192

Details

Name:	00000029.00000003.467168735.0000024274973000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274973000
Size:	73728

Details

Name:	0000001E.00000003.389959747.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	40960

Details

Name:	00000015.00000003.371455844.000001C86A48A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A48A000
Size:	20480

Details

Name:	00000019.00000003.375144833.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	8192

Details

Name:	00000005.00000003.476917132.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000000.00000002.307084112.0000000002E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000029.00000003.478639527.000002427495E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427495E000
Size:	69632

Details

Name:	00000019.00000002.394710071.000000007FD60000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD60000
Size:	12288

Details

Name:	0000001E.00000002.405879823.0000000000A2D000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	4096

Details

Name:	00000005.00000003.384178859.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000002.413004927.0000000005A3F000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A3F000
Size:	4096

Details

Name:	00000005.00000003.321114998.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	65536

Details

Name:	00000005.00000003.522412134.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000002.494301985.000000F17BEF7000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BEF7000
Size:	36864

Details

Name:	00000004.00000002.334911180.0000000001920000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1920000
Size:	4096

Details

Name:	00000027.00000002.449300964.000001DB2EC82000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC82000
Size:	57344

Details

Name:	00000025.00000002.428044881.0000015A7FC70000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC70000
Size:	32768

Details

Name:	00000000.00000002.307670150.0000000007444000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7444000
Size:	8192

Details

Name:	00000019.00000003.366252133.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	24576

Details

Name:	0000001E.00000003.387086677.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	147456

Details

Name:	0000002D.00000002.556055380.000002081A180000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081A180000
Size:	4096

Details

Name:	00000014.00000000.348879947.00000000FFA92000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFA92000
Size:	4096

Details

Name:	00000015.00000002.372718923.000001C86A2D2000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A2D2000
Size:	425984

Details

Name:	0000001E.00000003.389580528.00000000015A7000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7000
Size:	16384

Details

Name:	00000006.00000002.347087909.00007FF50C524000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C524000
Size:	20480

Details

Name:	00000015.00000002.373115673.000001C86C12D000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C12D000
Size:	4096

Details

Name:	00000025.00000002.428018030.0000015A7FC56000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC56000
Size:	102400

Details

Name:	0000001B.00000003.379826519.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000000.00000002.307573052.0000000004700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4700000
Size:	4096

Details

Name:	00000015.00000002.372782514.000001C86A460000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A460000
Size:	8192

Details

Name:	00000019.00000003.371237677.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	00000000.00000003.299978293.0000000007481000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7481000
Size:	151552

Details

Name:	00000005.00000003.317734166.0000000000E35000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E35000
Size:	24576

Details

Name:	0000002D.00000002.555485380.0000020819F60000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20819F60000
Size:	4096

Details

Name:	0000001E.00000003.387125849.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.337308185.0000000006110000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6110000
Size:	12288

Details

Name:	0000000A.00000002.337042308.0000000000BD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	4096

Details

Name:	00000029.00000003.473590847.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	16384

Details

Name:	0000001E.00000003.387402934.0000000001591000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1591000
Size:	32768

Details

Name:	00000005.00000003.536453118.0000000004B63000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B63000
Size:	8192

Details

Name:	0000001E.00000003.390861660.00000000015ED000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ED000
Size:	94208

Details

Name:	0000001B.00000003.391153955.000000000100A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100A000
Size:	634880

Details

Name:	0000001E.00000003.403495592.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	49152

Details

Name:	00000019.00000003.373740381.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	65536

Details

Name:	00000005.00000003.339050744.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000025.00000002.429168057.00007FF50DF1E000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF1E000
Size:	4096

Details

Name:	00000005.00000003.330011322.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000005.00000002.555689879.0000000000B3E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B3E000
Size:	8192

Details

Name:	00000014.00000003.356203268.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	0000001B.00000003.383335218.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000029.00000003.483351247.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	12288

Details

Name:	00000019.00000003.370637033.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000001E.00000002.409181925.00000000030E2000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30E2000
Size:	4096

Details

Name:	0000001B.00000000.371028900.00000000FF9B2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9B2000
Size:	4096

Details

Name:	00000004.00000002.335326710.00000000FF6B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6B2000
Size:	4096

Details

Name:	00000004.00000003.329781092.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000000.00000003.301584349.0000000000E35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E35000
Size:	28672

Details

Name:	00000025.00000002.427603367.0000001631C7C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1631C7C000
Size:	16384

Details

Name:	00000005.00000003.317099407.0000000000E35000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E35000
Size:	24576

Details

Name:	00000015.00000002.374749122.00007FF5AEFCE000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFCE000
Size:	24576

Details

Name:	0000001B.00000003.383027923.0000000004789000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4789000
Size:	221184

Details

Name:	00000029.00000003.493793571.0000024274054000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274054000
Size:	12288

Details

Name:	00000006.00000002.346453299.00007FF50C32B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C32B000
Size:	8192

Details

Name:	00000027.00000002.447498495.000000CC551FB000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC551FB000
Size:	20480

Details

Name:	00000020.00000003.412482226.00000239ECC4F000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC4F000
Size:	131072

Details

Name:	0000001C.00000003.374546904.0000000002444000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2444000
Size:	45056

Details

Name:	00000020.00000003.412419810.00000239ECC75000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC75000
Size:	36864

Details

Name:	00000006.00000002.344807059.0000019BB17C0000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	19BB17C0000
Size:	8192

Details

Name:	00000006.00000002.345230893.0000019BB1800000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1800000
Size:	73728

Details

Name:	00000020.00000002.413634626.00007FF4FD90D000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD90D000
Size:	4096

Details

Name:	00000029.00000003.465370116.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	94208

Details

Name:	00000005.00000002.555013894.00000000001BA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BA000
Size:	24576

Details

Name:	00000015.00000000.354283534.00007DF5BCCE0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCE0000
Size:	4096

Details

Name:	0000001B.00000003.382662763.00000000047A0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47A0000
Size:	430080

Details

Name:	0000001E.00000003.387680522.0000000005A35000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A35000
Size:	8192

Details

Name:	00000016.00000002.358751595.00000000FF8B2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8B2000
Size:	4096

Details

Name:	00000015.00000002.372833265.000001C86A690000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A690000
Size:	69632

Details

Name:	00000004.00000003.331033493.0000000004CE6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE6000
Size:	4096

Details

Name:	0000001E.00000003.388859766.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	53248

Details

Name:	00000004.00000003.330946764.0000000004CEE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEE000
Size:	32768

Details

Name:	00000005.00000003.325726374.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	32768

Details

Name:	00000005.00000002.559279372.0000000004FF7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	8192

Details

Name:	00000004.00000003.331163194.000000000418B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418B000
Size:	8192

Details

Name:	00000004.00000003.314259388.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	430080

Details

Name:	00000011.00000002.556031976.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	0000002D.00000002.555205107.0000020819F20000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20819F20000
Size:	4096

Details

Name:	00000019.00000002.392246608.00000000059E0000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	59E0000
Size:	4096

Details

Name:	00000005.00000002.557498928.0000000001410000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1410000
Size:	4096

Details

Name:	0000001E.00000003.387569033.00000000015E1000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E1000
Size:	12288

Details

Name:	00000019.00000003.373811296.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	49152

Details

Name:	00000019.00000003.376818808.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	8192

Details

Name:	0000001E.00000003.387803395.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	36864

Details

Name:	00000020.00000002.413419618.00007DF50B7B2000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7B2000
Size:	4096

Details

Name:	00000020.00000002.413842904.00007FF4FDA4F000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA4F000
Size:	12288

Details

Name:	00000004.00000003.311168485.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000029.00000003.467211587.0000024274E1D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E1D000
Size:	118784

Details

Name:	00000005.00000003.337636652.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.337800364.0000000006315000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6315000
Size:	12288

Details

Name:	00000005.00000002.559154144.0000000004B2D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B2D000
Size:	12288

Details

Name:	00000019.00000003.376534431.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	12288

Details

Name:	00000011.00000002.555860458.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	20480

Details

Name:	0000001E.00000002.413113767.0000000005B40000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5B40000
Size:	65536

Details

Name:	00000029.00000003.482529615.00000242749DC000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749DC000
Size:	61440

Details

Name:	0000001E.00000003.388153191.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001E.00000003.391287675.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	49152

Details

Name:	00000011.00000000.364729599.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	00000004.00000002.335339797.00000000FF6D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6D0000
Size:	12288

Details

Name:	00000029.00000002.497240580.00007FF501ECB000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501ECB000
Size:	12288

Details

Name:	00000010.00000003.347031666.0000000005590000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5590000
Size:	12288

Details

Name:	0000000A.00000000.336780933.0000000001131000.00000020.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000004.00000003.324587016.0000000004D38000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D38000
Size:	49152

Details

Name:	00000014.00000003.376750528.00000000039AE000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39AE000
Size:	24576

Details

Name:	00000005.00000003.338081355.0000000006417000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6417000
Size:	12288

Details

Name:	00000005.00000003.321646090.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.314676645.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	00000005.00000003.330245949.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000002.348277686.00000000014F0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14F0000
Size:	8192

Details

Name:	00000011.00000002.554852548.000000784E54B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000019.00000002.392668223.0000000005C80000.00000040.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5C80000
Size:	4096

Details

Name:	00000019.00000002.390549777.0000000000DF9000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DF9000
Size:	8192

Details

Name:	00000005.00000003.357172435.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000014.00000003.375211330.0000000003A5A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A5A000
Size:	20480

Details

Name:	00000004.00000003.322573427.0000000004CEC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEC000
Size:	45056

Details

Name:	00000005.00000003.337283813.0000000005640000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5640000
Size:	8192

Details

Name:	00000029.00000003.475445683.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	4096

Details

Name:	00000005.00000003.330587585.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.365093191.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000011.00000002.555676441.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	73728

Details

Name:	00000025.00000002.427956379.0000015A7FC2C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC2C000
Size:	61440

Details

Name:	00000014.00000003.376428995.000000000399D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	399D000
Size:	65536

Details

Name:	00000015.00000003.371847898.000001C86A2C1000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A2C1000
Size:	57344

Details

Name:	00000005.00000002.560452581.000000000619F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	619F000
Size:	4096

Details

Name:	00000019.00000003.389942840.0000000005DC0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DC0000
Size:	36864

Details

Name:	00000019.00000003.374374893.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	4096

Details

Name:	00000015.00000002.374905464.00007FF5AEFF7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFF7000
Size:	57344

Details

Name:	00000029.00000003.467139044.00000242749A3000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A3000
Size:	114688

Details

Name:	0000001B.00000002.397080468.00000000011DB000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	00000025.00000002.428827290.00007FF50DE15000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE15000
Size:	20480

Details

Name:	00000015.00000002.372650216.000001C86A298000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A298000
Size:	4096

Details

Name:	0000000D.00000003.345431684.00000000058C3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58C3000
Size:	53248

Details

Name:	00000019.00000003.370218962.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	20480

Details

Name:	00000011.00000002.556529989.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000004.00000003.314342071.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	217088

Details

Name:	00000015.00000003.355505042.000001C86C10B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C10B000
Size:	53248

Details

Name:	0000001B.00000003.391380267.00000000010E4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10E4000
Size:	4096

Details

Name:	00000000.00000002.307051876.0000000001520000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1520000
Size:	4096

Details

Name:	00000011.00000000.346072430.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	00000005.00000002.557735464.0000000002A20000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A20000
Size:	20480

Details

Name:	00000005.00000003.536220493.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.364369253.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000019.00000002.393844673.0000000005DF0000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5DF0000
Size:	8192

Details

Name:	0000001E.00000002.406736493.000000000155A000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	155A000
Size:	122880

Details

Name:	00000004.00000002.332320620.0000000000D10000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D10000
Size:	4096

Details

Name:	0000001E.00000003.390418444.0000000005BC0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC0000
Size:	12288

Details

Name:	00000005.00000002.555806944.0000000000BA0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BA0000
Size:	16384

Details

Name:	0000001E.00000002.408734079.00000000018E0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18E0000
Size:	36864

Details

Name:	0000001B.00000002.396468556.0000000001076000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1076000
Size:	4096

Details

Name:	00000005.00000003.318000277.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	32768

Details

Name:	00000004.00000003.316238301.0000000004EE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE2000
Size:	12288

Details

Name:	00000014.00000003.375168530.0000000003927000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3927000
Size:	12288

Details

Name:	00000010.00000002.348097440.0000000001140000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1140000
Size:	16384

Details

Name:	00000005.00000003.325121072.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.372102606.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000005.00000003.318847791.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	65536

Details

Name:	00000006.00000002.344339518.0000007259B0C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7259B0C000
Size:	16384

Details

Name:	0000001E.00000003.388917379.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	4096

Details

Name:	00000011.00000000.345850950.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	00000005.00000003.535662652.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	155648

Details

Name:	00000005.00000003.329879821.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.346516138.000000000187E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	187E000
Size:	8192

Details

Name:	00000014.00000003.356064479.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000004.00000003.330888891.0000000004CDC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CDC000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000029.00000002.495673330.0000024274955000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274955000
Size:	106496

Details

Name:	00000010.00000002.348660803.000000007FA50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA50000
Size:	12288

Details

Name:	00000025.00000002.427812372.0000015A7FAA0000.00000004.00000040.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	15A7FAA0000
Size:	4096

Details

Name:	00000029.00000003.464251372.000002427497E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497E000
Size:	143360

Details

Name:	0000001E.00000003.391238676.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	49152

Details

Name:	00000025.00000002.427871532.0000015A7FB00000.00000004.00000020.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15A7FB00000
Size:	8192

Details

Name:	0000001B.00000003.392961444.0000000001026000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1026000
Size:	24576

Details

Name:	0000001E.00000003.389694275.00000000015ED000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ED000
Size:	12288

Details

Name:	00000004.00000003.325403823.0000000004D38000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D38000
Size:	49152

Details

Name:	00000005.00000003.319084608.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000004.00000003.330633503.0000000004CE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE2000
Size:	4096

Details

Name:	00000029.00000003.475232477.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	0000002D.00000002.556314080.000002081A730000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2081A730000
Size:	12288

Details

Name:	00000005.00000003.321973076.0000000005440000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5440000
Size:	65536

Details

Name:	0000001E.00000003.388252361.0000000005A70000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A70000
Size:	20480

Details

Name:	00000029.00000002.495173439.0000024274086000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274086000
Size:	135168

Details

Name:	00000015.00000002.372429119.00000086CBAFF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBAFF000
Size:	4096

Details

Name:	00000019.00000002.391299425.0000000001B70000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B70000
Size:	69632

Details

Name:	0000000D.00000002.346570427.0000000001980000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1980000
Size:	36864

Details

Name:	0000001E.00000003.387870337.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.319237266.00000000051B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51B0000
Size:	65536

Details

Name:	00000027.00000002.449688907.000001DB2EED0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EED0000
Size:	4096

Details

Name:	00000019.00000003.369779635.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000002.555834307.0000000000BB0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BB0000
Size:	16384

Details

Name:	00000029.00000002.496542742.00007FF501DD5000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501DD5000
Size:	20480

Details

Name:	00000019.00000002.392294120.0000000005A80000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	65536

Details

Name:	00000005.00000003.319015834.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	12288

Details

Name:	0000001E.00000003.388512988.00000000015A9000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A9000
Size:	8192

Details

Name:	0000001B.00000003.395292241.000000000105A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	105A000
Size:	45056

Details

Name:	00000005.00000002.559517231.00000000050C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50C0000
Size:	65536

Details

Name:	00000004.00000002.334961823.000000000253E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	253E000
Size:	8192

Details

Name:	00000000.00000003.289404432.0000000000EA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EA0000
Size:	114688

Details

Name:	0000001E.00000003.390646647.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000002.391429828.0000000003370000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3370000
Size:	28672

Details

Name:	00000015.00000002.373568587.00007FF5AEAC3000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEAC3000
Size:	8192

Details

Name:	0000001B.00000000.370571594.00000000011C0000.00000008.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000006.00000002.346785917.00007FF50C453000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C453000
Size:	28672

Details

Name:	00000011.00000002.555429652.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	00000015.00000002.372700343.000001C86A2BD000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A2BD000
Size:	16384

Details

Name:	00000025.00000002.429225206.00007FF50DF3D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF3D000
Size:	8192

Details

Name:	00000005.00000003.339959368.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.380537962.0000000003A55000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3A55000
Size:	12288

Details

Name:	00000005.00000003.337254584.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	28672

Details

Name:	00000014.00000003.360218692.00000000039C7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39C7000
Size:	4096

Details

Name:	00000014.00000002.379959944.000000000135E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	135E000
Size:	8192

Details

Name:	00000019.00000003.369815573.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.391413815.000000000334C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	334C000
Size:	16384

Details

Name:	00000029.00000003.474959850.000002427495E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427495E000
Size:	69632

Details

Name:	00000004.00000000.305367578.00000000FF6B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6B0000
Size:	4096

Details

Name:	00000005.00000003.321421422.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	12288

Details

Name:	0000001C.00000002.376789975.0000000000BD0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	36864

Details

Name:	00000014.00000003.375790673.0000000003941000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3941000
Size:	442368

Details

Name:	00000000.00000002.306860184.0000000000E85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E85000
Size:	61440

Details

Name:	00000019.00000002.391111535.0000000001814000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1814000
Size:	4096

Details

Name:	00000000.00000003.300365493.0000000007451000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7451000
Size:	196608

Details

Name:	00000019.00000003.364555165.000000000166C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166C000
Size:	49152

Details

Name:	00000005.00000002.561174123.000000007F560000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F560000
Size:	4096

Details

Name:	00000000.00000003.305825458.0000000000DC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	4096

Details

Name:	00000019.00000002.391508235.000000000339C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	339C000
Size:	16384

Details

Name:	00000025.00000002.428758703.00007FF50DDCF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DDCF000
Size:	8192

Details

Name:	00000004.00000002.335290637.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	0000001E.00000003.388174230.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000000A.00000002.337028910.0000000000BC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BC0000
Size:	16384

Details

Name:	00000004.00000003.311255389.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.337913744.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	20480

Details

Name:	00000005.00000003.319072412.00000000051D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	61440

Details

Name:	0000001E.00000000.385268108.000000007FBD2000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBD2000
Size:	4096

Details

Name:	00000000.00000002.306437416.0000000000BA4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA4000
Size:	12288

Details

Name:	00000014.00000003.377289417.0000000003976000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3976000
Size:	4096

Details

Name:	00000029.00000003.482467503.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	4096

Details

Name:	00000005.00000003.342598603.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000005.00000003.339428547.0000000004B61000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B61000
Size:	8192

Details

Name:	00000005.00000003.327513389.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.373007186.000001C86C100000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C100000
Size:	12288

Details

Name:	00000029.00000002.495959509.00007FF501779000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501779000
Size:	8192

Details

Name:	00000004.00000003.320833602.0000000004CFF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFF000
Size:	446464

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000001E.00000003.388068929.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000002.391154843.000000000182D000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	182D000
Size:	4096

Details

Name:	00000019.00000003.375685622.0000000005D60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	12288

Details

Name:	00000011.00000002.555791514.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	00000005.00000003.319558882.00000000051D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	16384

Details

Name:	00000005.00000002.555912333.0000000000DA0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DA0000
Size:	4096

Details

Name:	00000005.00000003.536350437.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.380514251.0000000003A06000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3A06000
Size:	4096

Details

Name:	00000025.00000002.429235298.00007FF50DF92000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF92000
Size:	12288

Details

Name:	0000001E.00000003.386808665.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000002.557434404.0000000001290000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1290000
Size:	69632

Details

Name:	00000005.00000002.559106717.0000000003ADC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3ADC000
Size:	143360

Details

Name:	0000001E.00000003.388599457.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	36864

Details

Name:	00000004.00000002.332327459.0000000000D30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	102400

Details

Name:	00000005.00000003.318774802.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	4096

Details

Name:	00000005.00000003.316383699.0000000000E38000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E38000
Size:	135168

Details

Name:	00000020.00000002.413141643.00000239ECC50000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC50000
Size:	126976

Details

Name:	00000006.00000002.347113655.00007FF50C52A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C52A000
Size:	12288

Details

Name:	0000000D.00000002.346024382.0000000001350000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1350000
Size:	16384

Details

Name:	00000027.00000002.452282940.00007FF531060000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531060000
Size:	4096

Details

Name:	00000015.00000002.373077356.000001C86C11B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C11B000
Size:	12288

Details

Name:	0000001E.00000003.388682078.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	12288

Details

Name:	00000019.00000003.365984481.000000000161C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161C000
Size:	135168

Details

Name:	00000016.00000000.358432241.00000000FF8B2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8B2000
Size:	4096

Details

Name:	00000005.00000002.555886691.0000000000D90000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D90000
Size:	4096

Details

Name:	00000000.00000003.305533970.0000000000DED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DED000
Size:	4096

Details

Name:	00000005.00000002.557228441.0000000001060000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1060000
Size:	65536

Details

Name:	00000016.00000002.358584165.0000000001131000.00000020.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000000.00000003.289523316.0000000002F70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F70000
Size:	4096

Details

Name:	0000001E.00000003.386856629.0000000001590000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1590000
Size:	131072

Details

Name:	00000005.00000003.338166921.0000000006420000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6420000
Size:	57344

Details

Name:	0000002A.00000003.472634715.00000270A8E90000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E90000
Size:	40960

Details

Name:	00000029.00000003.483331687.0000024274981000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274981000
Size:	8192

Details

Name:	00000015.00000003.371767337.000001C86C106000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C106000
Size:	36864

Details

Name:	00000019.00000000.362938877.000000007FD50000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD50000
Size:	4096

Details

Name:	0000001C.00000002.375151364.00000000001F0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	00000004.00000003.315923766.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	00000005.00000003.338317130.0000000006590000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6590000
Size:	65536

Details

Name:	00000016.00000002.358564725.00000000007F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000020.00000002.413607961.00007FF4FD8C6000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD8C6000
Size:	16384

Details

Name:	00000005.00000000.315379239.000000007F572000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F572000
Size:	4096

Details

Name:	0000002D.00000003.544884563.0000020819FF4000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20819FF4000
Size:	4096

Details

Name:	00000029.00000003.470379101.000002427499F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499F000
Size:	94208

Details

Name:	00000015.00000002.373757051.00007FF5AEC07000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEC07000
Size:	8192

Details

Name:	00000019.00000003.373995278.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	4096

Details

Name:	00000004.00000003.311283775.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000025.00000002.427632015.0000001631D7E000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1631D7E000
Size:	8192

Details

Name:	00000005.00000003.461743585.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000025.00000002.428629493.00007FF50DD46000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DD46000
Size:	16384

Details

Name:	0000000D.00000002.346362455.0000000001820000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1820000
Size:	8192

Details

Name:	00000029.00000002.497014076.00007FF501E93000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E93000
Size:	28672

Details

Name:	0000001B.00000003.382975785.0000000004756000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4756000
Size:	430080

Details

Name:	00000014.00000003.376519329.00000000039B4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39B4000
Size:	49152

Details

Name:	00000005.00000003.316636944.0000000000E20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E20000
Size:	98304

Details

Name:	0000001E.00000003.386730362.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.374765178.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	8192

Details

Name:	00000019.00000003.366211277.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	16384

Details

Name:	00000029.00000003.475298553.0000024274971000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274971000
Size:	36864

Details

Name:	00000025.00000003.427235686.0000015A7FC51000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC51000
Size:	122880

Details

Name:	00000014.00000003.356087869.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000014.00000003.379118136.0000000003939000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3939000
Size:	8192

Details

Name:	00000011.00000002.555806761.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	0000001B.00000002.396234413.0000000000F5E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E000
Size:	8192

Details

Name:	00000019.00000002.390662707.0000000000F40000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	4096

Details

Name:	00000005.00000003.337785382.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	16384

Details

Name:	00000005.00000003.319379120.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	53248

Details

Name:	00000000.00000002.307664667.00000000073B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	73B1000
Size:	4096

Details

Name:	00000005.00000003.550810956.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000015.00000002.372794346.000001C86A480000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C86A480000
Size:	16384

Details

Name:	0000001C.00000002.377288326.0000000002621000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2621000
Size:	36864

Details

Name:	00000019.00000003.374090506.0000000001622000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1622000
Size:	53248

Details

Name:	00000016.00000002.358758272.00000000FF8C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8C0000
Size:	12288

Details

Name:	0000001E.00000002.412665518.0000000005960000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5960000
Size:	40960

Details

Name:	00000029.00000003.480008194.00000242749AA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749AA000
Size:	4096

Details

Name:	00000005.00000003.371803493.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	135168

Details

Name:	00000005.00000003.317052513.0000000000E1E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	118784

Details

Name:	00000027.00000002.449604526.000001DB2ED00000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2ED00000
Size:	4096

Details

Name:	00000014.00000003.378825188.000000000391A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	391A000
Size:	12288

Details

Name:	00000015.00000002.374212194.00007FF5AEE82000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEE82000
Size:	8192

Details

Name:	00000014.00000003.376622609.000000000398C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	398C000
Size:	69632

Details

Name:	00000004.00000002.334930499.000000000194A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	194A000
Size:	184320

Signature Hits	Behavior Group	Mitre Attack
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture

Details

Name:	0000001C.00000002.376491879.0000000000889000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	889000
Size:	86016

Details

Name:	0000002D.00000002.556782760.00007FF565751000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF565751000
Size:	8192

Details

Name:	00000005.00000003.316945354.0000000000E20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E20000
Size:	86016

Details

Name:	00000005.00000003.321391696.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	8192

Details

Name:	0000002D.00000002.557547984.00007FF57982A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57982A000
Size:	12288

Details

Name:	00000004.00000003.320759882.0000000004188000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4188000
Size:	28672

Details

Name:	00000019.00000002.391082012.0000000001800000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1800000
Size:	8192

Details

Name:	0000001E.00000003.388033191.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.320698512.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	8192

Details

Name:	0000001B.00000003.391365628.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000005.00000003.344907021.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000004.00000003.324258476.0000000004D57000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D57000
Size:	8192

Details

Name:	00000020.00000003.412556888.00000239ECC49000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC49000
Size:	4096

Details

Name:	00000004.00000002.334868240.0000000001750000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1750000
Size:	69632

Details

Name:	00000005.00000003.536057960.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002D.00000002.555689058.0000020819FC1000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20819FC1000
Size:	335872

Details

Name:	00000005.00000003.321637140.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.495890126.00007DF50FBF2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBF2000
Size:	4096

Details

Name:	00000004.00000003.331474001.0000000004D80000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D80000
Size:	16384

Details

Name:	0000001E.00000003.388337741.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	49152

Details

Name:	0000001E.00000002.408643929.000000000178E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	178E000
Size:	8192

Details

Name:	00000004.00000003.330662948.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000019.00000003.372839652.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	16384

Details

Name:	00000000.00000000.289093416.0000000000251000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	251000
Size:	36864

Details

Name:	00000005.00000003.321756413.000000000540A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	540A000
Size:	24576

Details

Name:	00000029.00000003.470720862.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	40960

Details

Name:	00000005.00000003.340404643.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.311214734.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000029.00000003.481941090.00000242749AA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749AA000
Size:	53248

Details

Name:	00000025.00000002.429332189.00007FF50DFAA000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFAA000
Size:	12288

Details

Name:	00000005.00000003.487986724.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	00000019.00000003.374506323.0000000001625000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1625000
Size:	45056

Details

Name:	0000001B.00000003.393086513.0000000000FFE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FFE000
Size:	8192

Details

Name:	00000019.00000003.366138260.000000000166C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166C000
Size:	8192

Details

Name:	00000029.00000002.496771684.00007FF501E63000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E63000
Size:	16384

Details

Name:	00000019.00000003.367399555.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000020.00000002.413335399.00000239ED340000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ED340000
Size:	4096

Details

Name:	00000014.00000003.358984904.00000000048B1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	48B1000
Size:	372736

Details

Name:	0000001C.00000002.377261866.0000000002610000.00000040.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2610000
Size:	4096

Details

Name:	00000027.00000002.447547454.000000CC55377000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC55377000
Size:	36864

Details

Name:	00000020.00000002.413043105.00000239ECC13000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC13000
Size:	86016

Details

Name:	00000000.00000002.306561877.0000000000D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000029.00000002.494884972.0000024273FA0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24273FA0000
Size:	4096

Details

Name:	00000025.00000002.428151983.0000015A7FC86000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC86000
Size:	45056

Details

Name:	00000005.00000002.555719743.0000000000B7E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B7E000
Size:	8192

Details

Name:	0000001C.00000002.376240388.0000000000837000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	837000
Size:	4096

Details

Name:	00000014.00000003.356163861.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000005.00000003.337570593.0000000005635000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5635000
Size:	8192

Details

Name:	00000014.00000003.379129738.000000000394A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	394A000
Size:	8192

Details

Name:	00000014.00000002.380525641.0000000003A50000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3A50000
Size:	12288

Details

Name:	00000027.00000002.449110266.000001DB2EC4D000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC4D000
Size:	12288

Details

Name:	0000001B.00000003.394014338.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000029.00000002.496495992.00007FF501D8F000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D8F000
Size:	8192

Details

Name:	00000004.00000003.330751484.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000005.00000003.535740059.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.387560515.000000000159E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159E000
Size:	16384

Details

Name:	00000005.00000003.358983783.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	0000001E.00000002.413045781.0000000005A60000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5A60000
Size:	12288

Details

Name:	0000000D.00000002.345906143.0000000000F80000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	F80000
Size:	4096

Details

Name:	0000001E.00000003.390910717.000000000159D000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159D000
Size:	20480

Details

Name:	00000006.00000002.344770129.0000019BB1790000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1790000
Size:	12288

Details

Name:	00000015.00000002.375116959.00007FF5AF05A000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF05A000
Size:	12288

Details

Name:	00000011.00000000.345408521.000000784EB7B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	0000001B.00000003.392309140.0000000001042000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1042000
Size:	16384

Details

Name:	00000029.00000003.474631986.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	176128

Details

Name:	00000005.00000003.318078594.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000019.00000003.366235399.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000025.00000002.428859022.00007FF50DE3B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE3B000
Size:	8192

Details

Name:	00000005.00000002.557175280.0000000001010000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	4096

Details

Name:	00000005.00000003.321985613.0000000005430000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5430000
Size:	49152

Details

Name:	0000002A.00000002.474052552.00007FF535FBD000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FBD000
Size:	4096

Details

Name:	00000000.00000003.289769792.0000000000E3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3E000
Size:	8192

Details

Name:	00000005.00000002.561292280.000000007F572000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F572000
Size:	4096

Details

Name:	0000001E.00000003.390499297.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	12288

Details

Name:	00000014.00000003.378080640.0000000003925000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3925000
Size:	8192

Details

Name:	00000004.00000002.334955602.000000000213E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	213E000
Size:	8192

Details

Name:	0000001B.00000002.396222458.0000000000F1E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F1E000
Size:	4096

Details

Name:	00000019.00000003.364532510.0000000001680000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1680000
Size:	32768

Details

Name:	0000000D.00000002.347015554.0000000003380000.00000040.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	3380000
Size:	4096

Details

Name:	00000019.00000003.375916871.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	8192

Details

Name:	00000005.00000003.549849959.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000000.459817111.00007FF501F81000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F81000
Size:	16384

Details

Name:	00000004.00000002.335294260.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	4096

Details

Name:	00000027.00000002.447765875.000001DB2EBF0000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EBF0000
Size:	4096

Details

Name:	00000005.00000003.339697744.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.345611048.0000019BB1881000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1881000
Size:	49152

Details

Name:	0000002D.00000002.556961830.00007FF5793E3000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5793E3000
Size:	4096

Details

Name:	0000002A.00000002.473965994.00007DF543D22000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D22000
Size:	4096

Details

Name:	00000014.00000003.356193472.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000015.00000002.374803007.00007FF5AEFE7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFE7000
Size:	8192

Details

Name:	0000002A.00000002.473741653.00000270A8E90000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E90000
Size:	32768

Details

Name:	00000015.00000002.374726630.00007FF5AEFC2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFC2000
Size:	40960

Details

Name:	0000001E.00000002.413073409.0000000005A80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	4096

Details

Name:	00000019.00000003.377463700.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	49152

Details

Name:	0000001B.00000003.386601288.00000000010E3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10E3000
Size:	8192

Details

Name:	00000025.00000002.429057412.00007FF50DEE0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEE0000
Size:	4096

Details

Name:	00000011.00000000.345513415.0000024B7C990000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	00000004.00000002.335130379.00000000040C0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40C0000
Size:	4096

Details

Name:	0000001E.00000003.390428661.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	65536

Details

Name:	00000011.00000002.556481392.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	00000005.00000003.363591661.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000025.00000002.428976426.00007FF50DECD000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DECD000
Size:	4096

Details

Name:	00000019.00000003.364853862.0000000001680000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1680000
Size:	40960

Details

Name:	00000005.00000003.384721549.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	176128

Details

Name:	00000004.00000003.330978275.0000000004CF3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CF3000
Size:	12288

Details

Name:	00000000.00000002.307538265.000000000331F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	331F000
Size:	4096

Details

Name:	00000019.00000003.390005759.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.391589613.00000000033D0000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	33D0000
Size:	65536

Details

Name:	00000015.00000003.371860692.000001C86A2D2000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A2D2000
Size:	425984

Details

Name:	00000004.00000003.325708112.0000000004D26000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D26000
Size:	28672

Details

Name:	00000019.00000003.366059893.000000000166F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166F000
Size:	12288

Details

Name:	00000011.00000000.363056853.0000024B7C970000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	00000005.00000003.318184648.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000000.00000002.306147089.00000000001F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	4096

Details

Name:	00000000.00000003.301454453.0000000000E10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E10000
Size:	8192

Details

Name:	00000005.00000003.317447293.0000000000E1B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1B000
Size:	20480

Details

Name:	0000001B.00000002.396115362.0000000000D40000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D40000
Size:	16384

Details

Name:	0000001E.00000003.388905665.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.319493500.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000002.335190815.0000000004CDF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CDF000
Size:	4096

Details

Name:	00000025.00000002.428336333.00007DF51BC22000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC22000
Size:	4096

Details

Name:	0000002A.00000002.473824653.00000270A9180000.00000004.00000040.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	270A9180000
Size:	12288

Details

Name:	00000027.00000000.435813650.00007DF53EDA2000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDA2000
Size:	4096

Details

Name:	00000027.00000002.447647655.000001DB2EB70000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EB70000
Size:	102400

Details

Name:	00000015.00000003.355453130.000001C86C119000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C119000
Size:	20480

Details

Name:	00000019.00000002.391235423.000000000184B000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	184B000
Size:	4096

Details

Name:	0000002D.00000002.556592142.000002081AEE0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081AEE0000
Size:	20480

Details

Name:	00000019.00000002.391248847.0000000001860000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1860000
Size:	16384

Details

Name:	00000004.00000003.315444375.0000000004EE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE2000
Size:	12288

Details

Name:	0000001E.00000000.385204699.000000007FBC2000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC2000
Size:	4096

Details

Name:	00000005.00000002.561333079.000000007F580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	12288

Details

Name:	00000005.00000003.339301219.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.320675195.0000000004CFC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFC000
Size:	458752

Details

Name:	00000020.00000002.412814404.00000052E3EF7000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3EF7000
Size:	36864

Details

Name:	00000011.00000000.364992057.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	00000005.00000003.337885296.0000000006316000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6316000
Size:	12288

Details

Name:	00000019.00000003.366490530.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.391581151.00000000033CF000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33CF000
Size:	4096

Details

Name:	00000005.00000002.560721161.000000000654C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	654C000
Size:	16384

Details

Name:	00000005.00000003.461381279.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000014.00000003.379250036.0000000003932000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3932000
Size:	4096

Details

Name:	00000005.00000003.338150342.0000000006420000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6420000
Size:	20480

Details

Name:	0000001B.00000003.394340423.000000000100E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	0000001B.00000002.396167579.0000000000EE0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EE0000
Size:	4096

Details

Name:	0000001B.00000003.379505878.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000019.00000003.366565659.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000027.00000002.452297248.00007FF531063000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531063000
Size:	12288

Details

Name:	00000014.00000003.377826114.0000000003969000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3969000
Size:	20480

Details

Name:	00000025.00000002.428837069.00007FF50DE1B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE1B000
Size:	24576

Details

Name:	00000006.00000002.344380096.0000007259E7E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7259E7E000
Size:	8192

Details

Name:	00000014.00000003.376732937.00000000039A4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39A4000
Size:	36864

Details

Name:	00000010.00000002.348561256.00000000056A0000.00000040.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	56A0000
Size:	4096

Details

Name:	00000019.00000003.372528237.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	00000029.00000002.497565975.00007FF501F59000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F59000
Size:	12288

Details

Name:	00000025.00000003.427274799.0000015A7FC4B000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC4B000
Size:	24576

Details

Name:	00000010.00000002.347780627.0000000000D3A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D3A000
Size:	4096

Details

Name:	00000029.00000003.480783503.00000242749A8000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A8000
Size:	8192

Details

Name:	00000019.00000002.391337709.0000000003110000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3110000
Size:	4096

Details

Name:	00000025.00000002.429251747.00007FF50DF99000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF99000
Size:	12288

Details

Name:	00000004.00000003.320815324.0000000004CE7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE7000
Size:	8192

Details

Name:	00000005.00000003.347947662.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000011.00000002.556205674.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	00000015.00000002.374515771.00007FF5AEF7F000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF7F000
Size:	12288

Details

Name:	00000015.00000003.355433796.000001C86C122000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C122000
Size:	28672

Details

Name:	0000002D.00000002.556085615.000002081A2B0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081A2B0000
Size:	4096

Details

Name:	00000020.00000002.412840549.00000052E3FFF000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3FFF000
Size:	4096

Details

Name:	00000004.00000000.305333389.00000000011C0000.00000008.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000019.00000002.391462467.0000000003387000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3387000
Size:	16384

Details

Name:	00000000.00000000.289141355.000000007F022000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F022000
Size:	4096

Details

Name:	0000001E.00000003.389770856.00000000015A7000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7000
Size:	16384

Details

Name:	00000015.00000002.372887636.000001C86C040000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86C040000
Size:	733184

Details

Name:	00000005.00000003.535321125.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	163840

Details

Name:	00000019.00000002.390535592.0000000000BF0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BF0000
Size:	16384

Details

Name:	00000005.00000003.338334048.0000000006580000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6580000
Size:	65536

Details

Name:	00000027.00000002.452472234.00007FF531112000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531112000
Size:	12288

Details

Name:	0000000D.00000002.347080821.0000000005890000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5890000
Size:	4096

Details

Name:	00000027.00000002.449618462.000001DB2ED02000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2ED02000
Size:	12288

Details

Name:	00000011.00000000.364242008.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	0000001B.00000002.397406144.0000000004789000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4789000
Size:	4096

Details

Name:	00000015.00000002.374301640.00007FF5AEF11000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF11000
Size:	8192

Details

Name:	00000005.00000003.536475210.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.477103804.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	159744

Details

Name:	00000019.00000003.366010367.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000011.00000002.556610285.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	00000005.00000003.337989317.0000000006311000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6311000
Size:	135168

Details

Name:	00000005.00000003.331770264.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000016.00000000.358369514.00000000011B2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	00000005.00000003.515586684.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000001C.00000002.375212175.00000000003F2000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F2000
Size:	4096

Details

Name:	00000019.00000002.391026487.0000000001661000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	00000019.00000002.391269773.0000000001970000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1970000
Size:	36864

Details

Name:	00000015.00000002.374427371.00007FF5AEF4E000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF4E000
Size:	4096

Details

Name:	00000027.00000002.450140386.00007FF530C21000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530C21000
Size:	20480

Details

Name:	0000000A.00000002.337116003.00000000011B2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000004.00000003.324934698.0000000004D2E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D2E000
Size:	28672

Details

Name:	00000014.00000003.358738701.00000000039E5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E5000
Size:	73728

Details

Name:	00000000.00000003.300503797.0000000007414000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7414000
Size:	192512

Details

Name:	00000015.00000002.373318482.00007FF5AE8D5000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AE8D5000
Size:	12288

Details

Name:	00000004.00000003.330603488.0000000004CE5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE5000
Size:	8192

Details

Name:	00000019.00000003.371732716.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	65536

Details

Name:	00000005.00000003.425495318.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.384558063.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	241664

Details

Name:	00000005.00000002.559834429.00000000051A0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	51A0000
Size:	65536

Details

Name:	00000005.00000003.520811878.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000029.00000002.496512302.00007FF501D92000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D92000
Size:	8192

Details

Name:	00000029.00000002.496460335.00007FF501D50000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D50000
Size:	4096

Details

Name:	00000014.00000003.378772103.000000000394A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	394A000
Size:	8192

Details

Name:	0000000D.00000002.345926751.0000000000F90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F90000
Size:	102400

Details

Name:	00000015.00000002.372365479.00000086CB6FE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CB6FE000
Size:	8192

Details

Name:	00000004.00000003.322137772.0000000004D63000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D63000
Size:	36864

Details

Name:	0000002A.00000002.473859052.00000270A9185000.00000004.00000040.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	270A9185000
Size:	8192

Details

Name:	00000000.00000002.306936496.0000000000EC5000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EC5000
Size:	16384

Details

Name:	00000019.00000002.394464488.000000007FC40000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC40000
Size:	20480

Details

Name:	00000005.00000003.339813667.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.337313502.0000000006114000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6114000
Size:	8192

Details

Name:	00000029.00000003.474755961.0000024274E6A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E6A000
Size:	425984

Details

Name:	00000005.00000002.560052879.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	4096

Details

Name:	00000011.00000002.554932034.000000784EB7B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	0000001B.00000003.386504220.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000019.00000002.394062403.00000000063F0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	63F0000
Size:	8192

Details

Name:	0000001E.00000003.389030028.00000000015A3000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	00000011.00000000.364406418.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000006.00000002.344892197.0000019BB17D0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB17D0000
Size:	16384

Details

Name:	0000001E.00000003.389363676.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	24576

Details

Name:	00000027.00000000.435864946.00007DF53EDC0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDC0000
Size:	12288

Details

Name:	00000011.00000000.345355505.000000784E54B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000005.00000003.315987370.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	180224

Details

Name:	00000005.00000003.425459374.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.358764380.00000000039D7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39D7000
Size:	57344

Details

Name:	00000015.00000002.373939073.00007FF5AEC55000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEC55000
Size:	28672

Details

Name:	00000015.00000002.372813607.000001C86A48B000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C86A48B000
Size:	16384

Details

Name:	00000019.00000002.391210112.0000000001842000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1842000
Size:	4096

Details

Name:	0000001E.00000003.390378383.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	57344

Details

Name:	00000029.00000002.496725879.00007FF501E5A000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E5A000
Size:	8192

Details

Name:	0000002A.00000002.474166520.00007FF535FFB000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FFB000
Size:	12288

Details

Name:	0000001B.00000003.391942936.0000000001073000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1073000
Size:	4096

Details

Name:	00000005.00000003.384213366.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.378719741.000000000391D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	391D000
Size:	4096

Details

Name:	00000019.00000002.390894159.00000000015D0000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15D0000
Size:	32768

Details

Name:	0000001B.00000000.370442383.0000000001130000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000004.00000002.334748625.00000000011C2000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C2000
Size:	20480

Details

Name:	0000001B.00000003.385794528.00000000010A8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8000
Size:	94208

Details

Name:	00000010.00000002.348446664.00000000018E0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18E0000
Size:	69632

Details

Name:	00000019.00000003.376563812.0000000001622000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1622000
Size:	94208

Details

Name:	00000005.00000003.498622446.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.387424295.0000000001591000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1591000
Size:	32768

Details

Name:	00000029.00000002.495657613.0000024274951000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274951000
Size:	12288

Details

Name:	00000014.00000002.379490651.00000000009F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9F0000
Size:	16384

Details

Name:	00000019.00000003.366336896.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	20480

Details

Name:	00000014.00000002.380407414.000000000397A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	397A000
Size:	45056

Details

Name:	00000025.00000002.428319749.00007DF51BC20000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC20000
Size:	4096

Details

Name:	00000020.00000002.413774392.00007FF4FDA37000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA37000
Size:	4096

Details

Name:	0000002A.00000002.474123713.00007FF535FD3000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FD3000
Size:	12288

Details

Name:	00000004.00000003.321514768.0000000004D02000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D02000
Size:	368640

Details

Name:	0000001C.00000002.375711015.00000000006C0000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6C0000
Size:	16384

Details

Name:	00000005.00000002.557150202.0000000000FFB000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FFB000
Size:	4096

Details

Name:	00000000.00000003.301671979.0000000000E84000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E84000
Size:	65536

Details

Name:	00000011.00000000.364909015.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	00000000.00000003.301483995.0000000000E13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E13000
Size:	167936

Details

Name:	00000019.00000000.362931974.000000007FD42000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD42000
Size:	4096

Details

Name:	00000004.00000002.334832167.00000000016C0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16C0000
Size:	12288

Details

Name:	00000014.00000002.380653398.00000000FFA92000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFA92000
Size:	4096

Details

Name:	00000005.00000003.340282557.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000002.391497713.0000000003395000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3395000
Size:	16384

Details

Name:	00000005.00000003.340414010.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.317792577.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	0000000D.00000002.347160076.000000007FBA2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	00000010.00000002.348601463.000000007FA30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA30000
Size:	4096

Details

Name:	00000005.00000003.446742366.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000005.00000003.360642038.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000025.00000002.427984190.0000015A7FC3C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC3C000
Size:	61440

Details

Name:	00000019.00000003.372964260.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000029.00000002.495623894.0000024274922000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274922000
Size:	172032

Details

Name:	00000019.00000002.391570926.00000000033CC000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33CC000
Size:	4096

Details

Name:	0000001E.00000002.408769218.0000000001AE0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AE0000
Size:	69632

Details

Name:	0000000D.00000002.347129754.000000007FAA0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	20480

Details

Name:	00000005.00000003.383985970.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000002.411164045.0000000003265000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3265000
Size:	16384

Details

Name:	0000001E.00000003.387210343.00000000015A2000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A2000
Size:	8192

Details

Name:	0000001E.00000003.390662125.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.374539680.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	0000000D.00000002.346507723.0000000001830000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1830000
Size:	8192

Details

Name:	00000015.00000002.373188308.00007DF5BCCF0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCF0000
Size:	12288

Details

Name:	00000014.00000003.356030107.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000019.00000003.390024046.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000000D.00000002.347061088.00000000053CE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53CE000
Size:	8192

Details

Name:	00000005.00000003.375312769.0000000006BD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BD0000
Size:	57344

Details

Name:	00000010.00000002.348425989.00000000016D0000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16D0000
Size:	8192

Details

Name:	0000002D.00000002.556240576.000002081A319000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2081A319000
Size:	4096

Details

Name:	00000005.00000002.560842303.00000000067B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67B0000
Size:	4096

Details

Name:	00000000.00000002.306917769.0000000000EC0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EC0000
Size:	16384

Details

Name:	00000020.00000002.413207204.00000239ECC81000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC81000
Size:	69632

Details

Name:	00000020.00000002.414220874.00007FF4FDB19000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB19000
Size:	12288

Details

Name:	00000005.00000003.338868858.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.379672667.0000000001130000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000000.00000003.301358480.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	4096

Details

Name:	00000005.00000003.332309182.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.387280443.00000000015A0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A0000
Size:	8192

Details

Name:	00000005.00000003.322572097.0000000005540000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5540000
Size:	12288

Details

Name:	00000005.00000003.425380023.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.555778444.0000000000B90000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B90000
Size:	16384

Details

Name:	00000005.00000003.513322821.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000000.00000003.301736806.0000000000DEE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEE000
Size:	8192

Details

Name:	00000019.00000003.364885682.0000000001672000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1672000
Size:	12288

Details

Name:	00000019.00000002.391397974.0000000003267000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3267000
Size:	32768

Details

Name:	00000010.00000002.347812903.0000000000D60000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D60000
Size:	4096

Details

Name:	00000005.00000003.321684010.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.376851712.0000000003996000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3996000
Size:	16384

Details

Name:	00000005.00000003.317892531.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	24576

Details

Name:	00000020.00000002.412860618.00000052E40FE000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E40FE000
Size:	8192

Details

Name:	0000001B.00000003.379793252.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	0000001E.00000003.391211863.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	16384

Details

Name:	00000005.00000003.548027189.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000019.00000003.374223845.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	45056

Details

Name:	00000019.00000003.372997232.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	45056

Details

Name:	0000001E.00000003.388570378.0000000005B40000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B40000
Size:	16384

Details

Name:	00000025.00000002.427917790.0000015A7FC13000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC13000
Size:	90112

Details

Name:	0000002D.00000002.556110500.000002081A2C0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081A2C0000
Size:	4096

Details

Name:	0000002D.00000002.556876488.00007FF5790C9000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5790C9000
Size:	12288

Details

Name:	00000019.00000002.391260424.000000000196E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	196E000
Size:	8192

Details

Name:	00000015.00000002.373291472.00007FF5AE8CF000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AE8CF000
Size:	4096

Details

Name:	00000006.00000002.345843352.00007DF51A1A2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1A2000
Size:	4096

Details

Name:	00000027.00000002.449776474.000001DB2F402000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2F402000
Size:	4096

Details

Name:	00000029.00000003.480963275.0000024274972000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274972000
Size:	114688

Details

Name:	00000005.00000003.322667918.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.321695320.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	16384

Details

Name:	00000005.00000003.498378651.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.317286511.0000000000E14000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E14000
Size:	159744

Details

Name:	00000010.00000003.346907609.0000000005550000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	45056

Details

Name:	00000005.00000003.325441291.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.339250329.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.320069522.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	4096

Details

Name:	00000006.00000002.345803670.0000019BB2002000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB2002000
Size:	4096

Details

Name:	0000001C.00000002.375184821.00000000003EE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EE000
Size:	8192

Details

Name:	0000001E.00000002.413810921.000000000664E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	664E000
Size:	8192

Details

Name:	00000005.00000003.424864862.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.379410437.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000003.338857004.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000003.305512561.0000000002CF0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2CF0000
Size:	16384

Details

Name:	00000005.00000003.347651174.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000011.00000002.555338951.0000024B7C970000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	00000014.00000002.380623255.00000000FF990000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF990000
Size:	20480

Details

Name:	00000005.00000003.536522016.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.559465627.00000000050B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50B0000
Size:	16384

Details

Name:	00000004.00000003.314063817.0000000004E3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E3A000
Size:	430080

Details

Name:	00000019.00000003.377278767.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	16384

Details

Name:	0000000A.00000002.337157263.00000000011DB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000027.00000002.447633806.000001DB2EB60000.00000004.00000040.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1DB2EB60000
Size:	4096

Details

Name:	00000004.00000003.330843925.0000000004CE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE2000
Size:	4096

Details

Name:	00000004.00000000.305062405.0000000001130000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000004.00000003.330971234.0000000004CFA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFA000
Size:	8192

Details

Name:	00000014.00000002.380385876.000000000396B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	396B000
Size:	12288

Details

Name:	0000001E.00000003.389391502.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	16384

Details

Name:	00000004.00000003.330741044.0000000004D1A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D1A000
Size:	12288

Details

Name:	0000001E.00000003.390108636.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000014.00000003.378174956.000000000395A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	395A000
Size:	32768

Details

Name:	00000005.00000003.339667937.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	188416

Details

Name:	00000005.00000002.561212146.000000007F562000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F562000
Size:	4096

Details

Name:	00000025.00000002.428731156.00007FF50DDAB000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DDAB000
Size:	8192

Details

Name:	00000025.00000002.428648174.00007FF50DD8D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DD8D000
Size:	4096

Details

Name:	00000014.00000003.378620307.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	00000025.00000002.428515294.00007FF50D813000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D813000
Size:	16384

Details

Name:	00000015.00000002.373178452.00007DF5BCCE2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCE2000
Size:	4096

Details

Name:	00000004.00000002.334784506.00000000015FF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15FF000
Size:	69632

Details

Name:	00000019.00000000.362925417.000000007FD40000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD40000
Size:	4096

Details

Name:	00000019.00000002.391627142.00000000033EA000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33EA000
Size:	24576

Details

Name:	0000001C.00000003.374283653.0000000002403000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2403000
Size:	53248

Details

Name:	0000001C.00000002.375543818.000000000069E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69E000
Size:	8192

Details

Name:	0000001C.00000002.377593468.000000007F382000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000020.00000002.413184389.00000239ECC70000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC70000
Size:	20480

Details

Name:	00000027.00000002.447595041.000000CC5557E000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC5557E000
Size:	8192

Details

Name:	0000002D.00000002.556938848.00007FF5793D8000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5793D8000
Size:	4096

Details

Name:	0000001B.00000003.385621391.00000000010E3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10E3000
Size:	8192

Details

Name:	0000000D.00000002.346830140.000000000319E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	319E000
Size:	8192

Details

Name:	00000025.00000002.429148077.00007FF50DF0B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF0B000
Size:	12288

Details

Name:	00000029.00000003.475366356.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	0000001B.00000002.396077313.0000000000C40000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C40000
Size:	4096

Details

Name:	00000004.00000003.314208168.0000000004D88000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D88000
Size:	217088

Details

Name:	00000015.00000002.373739040.00007FF5AEB0B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEB0B000
Size:	8192

Details

Name:	00000011.00000002.555582475.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	00000016.00000000.358391507.00000000011DB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	0000001C.00000000.372036571.0000000000150000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	4096

Details

Name:	00000006.00000002.344387545.000000725A07B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	725A07B000
Size:	20480

Details

Name:	0000001C.00000002.375905903.0000000000803000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	803000
Size:	4096

Details

Name:	00000029.00000002.495859075.00007DF50FBE2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBE2000
Size:	4096

Details

Name:	00000025.00000002.428639300.00007FF50DD71000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DD71000
Size:	8192

Details

Name:	0000000D.00000003.345423832.00000000058C0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58C0000
Size:	8192

Details

Name:	00000005.00000003.322066739.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000029.00000002.496526337.00007FF501D97000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D97000
Size:	4096

Details

Name:	00000005.00000003.546510319.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000010.00000000.344726434.0000000000D70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D70000
Size:	102400

Details

Name:	00000020.00000002.413699512.00007FF4FD99B000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD99B000
Size:	24576

Details

Name:	00000005.00000003.502050207.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000002D.00000002.555085740.000000791917E000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	791917E000
Size:	8192

Details

Name:	00000019.00000002.394613800.000000007FD50000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD50000
Size:	4096

Details

Name:	00000029.00000003.469279603.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	4096

Details

Name:	00000019.00000003.372807474.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	24576

Details

Name:	00000019.00000003.389803193.0000000005DB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DB0000
Size:	20480

Details

Name:	00000014.00000003.355317886.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000025.00000002.427617645.0000001631CFD000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1631CFD000
Size:	12288

Details

Name:	0000000A.00000002.337193586.00000000FFF50000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF50000
Size:	12288

Details

Name:	00000005.00000003.325190159.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.346913882.00007FF50C46E000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C46E000
Size:	28672

Details

Name:	00000014.00000000.348690315.00000000011B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
OS version to string mapping found (often used in BOTs)	Stealing of Sensitive Information
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000004.00000003.311302031.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000029.00000002.496422114.00007FF501D39000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D39000
Size:	4096

Details

Name:	00000015.00000003.371661649.000001C86C113000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C113000
Size:	4096

Details

Name:	0000001E.00000003.387158401.00000000015AA000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AA000
Size:	4096

Details

Name:	0000001E.00000003.389603337.00000000015AE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE000
Size:	282624

Details

Name:	0000002D.00000002.557100065.00007FF579652000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579652000
Size:	8192

Details

Name:	00000005.00000003.321866147.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000011.00000000.345885225.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	00000005.00000003.463333536.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000004.00000003.331339727.0000000004D03000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D03000
Size:	4096

Details

Name:	00000019.00000003.375895212.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	8192

Details

Name:	00000011.00000000.345522910.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	00000005.00000003.317080392.0000000000E0E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	24576

Details

Name:	0000001E.00000003.390473839.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	8192

Details

Name:	00000014.00000003.378630720.0000000003943000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3943000
Size:	12288

Details

Name:	0000001B.00000003.391391903.0000000000F1A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F1A000
Size:	20480

Details

Name:	00000019.00000003.375792659.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	65536

Details

Name:	00000020.00000002.413794745.00007FF4FDA49000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA49000
Size:	8192

Details

Name:	0000002D.00000002.556685744.00007DF5874B2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874B2000
Size:	4096

Details

Name:	00000029.00000003.467437007.0000024274977000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274977000
Size:	4096

Details

Name:	00000000.00000002.306503918.0000000000CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CE7000
Size:	4096

Details

Name:	00000015.00000002.372871953.000001C86BC60000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86BC60000
Size:	12288

Details

Name:	00000015.00000002.374350418.00007FF5AEF32000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF32000
Size:	4096

Details

Name:	00000025.00000002.428943691.00007FF50DE45000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE45000
Size:	4096

Details

Name:	00000005.00000003.321106811.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	8192

Details

Name:	00000004.00000003.325964814.0000000004D2B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D2B000
Size:	8192

Details

Name:	00000019.00000003.365082209.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.318965860.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	16384

Details

Name:	00000020.00000002.413288518.00000239ECED0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECED0000
Size:	4096

Details

Name:	0000001E.00000002.405237910.0000000000940000.00000004.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	940000
Size:	4096

Details

Name:	00000029.00000002.495445146.0000024274200000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24274200000
Size:	4096

Details

Name:	00000015.00000002.374577220.00007FF5AEF93000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF93000
Size:	12288

Details

Name:	0000001B.00000003.382430344.000000000473B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	473B000
Size:	331776

Details

Name:	0000001B.00000002.395721352.00000000005B0000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5B0000
Size:	4096

Details

Name:	00000014.00000002.380103334.00000000014A0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	14A0000
Size:	733184

Details

Name:	0000001E.00000003.390835469.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	12288

Details

Name:	00000011.00000002.556180876.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	00000005.00000003.319668234.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	45056

Details

Name:	00000005.00000003.338900670.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.341341547.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000004.00000002.335166809.000000000418E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	418E000
Size:	4096

Details

Name:	00000027.00000002.451509109.00007FF531037000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531037000
Size:	4096

Details

Name:	00000029.00000002.496447145.00007FF501D4D000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D4D000
Size:	4096

Details

Name:	00000014.00000002.379633754.00000000010FE000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10FE000
Size:	8192

Details

Name:	00000014.00000003.363227792.0000000003A05000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A05000
Size:	8192

Details

Name:	0000001E.00000003.388613613.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	24576

Details

Name:	0000001E.00000002.409242406.00000000030E7000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30E7000
Size:	4096

Details

Name:	00000019.00000003.369888669.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000000D.00000002.345956596.0000000000FF0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF0000
Size:	16384

Details

Name:	00000016.00000002.358702199.00000000011DB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	00000014.00000003.355282519.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000001C.00000002.376615337.00000000009DE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9DE000
Size:	8192

Details

Name:	00000027.00000002.450101548.00007FF530993000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530993000
Size:	16384

Details

Name:	0000001E.00000003.390579020.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	4096

Details

Name:	0000001E.00000002.411616846.0000000003283000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3283000
Size:	12288

Details

Name:	0000001B.00000002.396056913.0000000000C2E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C2E000
Size:	73728

Details

Name:	00000005.00000003.384019471.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000000.305375090.00000000FF6B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6B2000
Size:	4096

Details

Name:	00000019.00000002.391178352.0000000001836000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1836000
Size:	8192

Details

Name:	00000000.00000003.300477107.00000000074B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B1000
Size:	8192

Details

Name:	0000001E.00000003.387438843.000000000159E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159E000
Size:	16384

Details

Name:	00000029.00000003.480239629.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	4096

Details

Name:	00000010.00000002.348039004.0000000000FA3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA3000
Size:	4096

Details

Name:	00000027.00000002.449710005.000001DB2F0D0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2F0D0000
Size:	12288

Details

Name:	0000001B.00000002.396650816.000000000109F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	109F000
Size:	24576

Details

Name:	00000015.00000002.373150822.00007DF5BCCD0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCD0000
Size:	4096

Details

Name:	0000001B.00000002.397065710.00000000011D7000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11D7000
Size:	12288

Details

Name:	0000001E.00000003.389985677.0000000005B90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	00000005.00000003.325811154.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000015.00000003.355461488.000001C86C118000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C118000
Size:	4096

Details

Name:	00000014.00000003.359057344.00000000048B0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	48B0000
Size:	430080

Details

Name:	00000005.00000003.317749132.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000010.00000002.348314218.0000000001517000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1517000
Size:	4096

Details

Name:	00000000.00000003.301753118.0000000000DF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DF1000
Size:	4096

Details

Name:	00000029.00000002.496162700.00007FF501C52000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501C52000
Size:	4096

Details

Name:	00000027.00000002.452512982.00007FF531124000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531124000
Size:	20480

Details

Name:	00000005.00000003.340262818.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000002.348261991.00000000014E4000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14E4000
Size:	4096

Details

Name:	00000005.00000003.340123184.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000005.00000003.338181596.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	184320

Details

Name:	00000029.00000003.478888656.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	4096

Details

Name:	00000019.00000003.370552264.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.392333142.0000000005BD0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5BD0000
Size:	12288

Details

Name:	00000014.00000002.380490513.00000000039C1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	39C1000
Size:	24576

Details

Name:	00000029.00000003.477335120.0000024274F63000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274F63000
Size:	397312

Details

Name:	00000029.00000002.494375396.000000F17C178000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17C178000
Size:	32768

Details

Name:	00000005.00000003.355265487.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000014.00000002.380011236.00000000013CE000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13CE000
Size:	8192

Details

Name:	00000010.00000002.348087562.0000000001130000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	0000000D.00000003.345545011.00000000058E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	16384

Details

Name:	00000029.00000002.494692844.0000024273E40000.00000004.00000040.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24273E40000
Size:	4096

Details

Name:	00000014.00000003.376388251.000000000393E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	393E000
Size:	12288

Details

Name:	00000019.00000003.377230701.0000000005D7D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	12288

Details

Name:	0000001B.00000003.392812692.000000000104B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104B000
Size:	12288

Details

Name:	00000029.00000002.495104789.000002427405C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2427405C000
Size:	77824

Details

Name:	00000019.00000003.374114951.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000011.00000000.345977036.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000015.00000002.372707714.000001C86A2C3000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A2C3000
Size:	49152

Details

Name:	0000001B.00000002.396776552.0000000001100000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1100000
Size:	4096

Details

Name:	00000019.00000002.391058612.00000000017CF000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CF000
Size:	4096

Details

Name:	00000000.00000000.289128167.000000007F012000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F012000
Size:	4096

Details

Name:	00000005.00000003.547609043.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000004.00000003.330710269.0000000004D12000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D12000
Size:	8192

Details

Name:	00000005.00000003.319620504.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000014.00000003.355988341.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000001B.00000003.392880399.000000000104B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104B000
Size:	12288

Details

Name:	00000005.00000002.557274948.0000000001070000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1070000
Size:	40960

Details

Name:	00000011.00000002.555966436.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	0000001B.00000002.397359206.0000000003BD0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3BD0000
Size:	8192

Details

Name:	0000000D.00000000.342746080.000000007FBB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	0000002A.00000002.473689900.00000270A8E76000.00000004.00000020.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	270A8E76000
Size:	65536

Details

Name:	00000014.00000003.375064335.000000000392A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392A000
Size:	536576

Details

Name:	00000014.00000003.378933423.000000000394A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	394A000
Size:	8192

Details

Name:	00000020.00000002.413520301.00007FF4FD393000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD393000
Size:	16384

Details

Name:	00000005.00000002.559614782.0000000005120000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	65536

Details

Name:	0000000D.00000003.345406593.00000000058D0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58D0000
Size:	45056

Details

Name:	00000015.00000002.372413263.00000086CB9FF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CB9FF000
Size:	4096

Details

Name:	00000004.00000003.331432216.0000000004D84000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D84000
Size:	16384

Details

Name:	0000000A.00000000.336776479.0000000001130000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000004.00000002.335306263.0000000004EE4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE4000
Size:	4096

Details

Name:	00000000.00000002.306424162.00000000009E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	16384

Details

Name:	00000006.00000000.331504642.00007DF51A1B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1B0000
Size:	4096

Details

Name:	00000005.00000003.316374504.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000019.00000003.376844532.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000015.00000003.355387881.000001C86C11E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C11E000
Size:	61440

Details

Name:	00000015.00000003.371925692.000001C86A29A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A29A000
Size:	159744

Details

Name:	00000005.00000003.320935782.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	40960

Details

Name:	00000000.00000002.306983269.00000000011A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11A0000
Size:	36864

Details

Name:	0000001E.00000002.405687633.0000000000A1A000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A1A000
Size:	8192

Details

Name:	0000001E.00000003.388964645.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000016.00000000.358425930.00000000FF8B0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8B0000
Size:	4096

Details

Name:	00000014.00000002.380084008.0000000001490000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1490000
Size:	12288

Details

Name:	00000005.00000002.557654900.000000000292F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292F000
Size:	4096

Details

Name:	00000015.00000002.374557322.00007FF5AEF90000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF90000
Size:	4096

Details

Name:	00000005.00000002.559665811.0000000005140000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5140000
Size:	4096

Details

Name:	00000006.00000000.331557735.00007DF51A1B2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1B2000
Size:	4096

Details

Name:	0000001E.00000003.389110726.00000000015EC000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15EC000
Size:	24576

Details

Name:	00000005.00000003.350102279.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000010.00000002.347969217.0000000000DCC000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DCC000
Size:	16384

Details

Name:	0000002D.00000002.557302125.00007FF579760000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579760000
Size:	4096

Details

Name:	00000005.00000003.337549260.00000000061A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	61A0000
Size:	24576

Details

Name:	00000006.00000002.345964225.00007FF50C021000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C021000
Size:	20480

Details

Name:	0000002D.00000002.555145052.000000791927E000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	791927E000
Size:	8192

Details

Name:	00000005.00000003.324834403.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.495374821.00000242740F4000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740F4000
Size:	53248

Details

Name:	00000006.00000002.345416344.0000019BB1813000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1813000
Size:	77824

Details

Name:	00000016.00000002.358745315.00000000FF8B0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8B0000
Size:	4096

Details

Name:	00000011.00000002.556592306.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	00000005.00000003.425579982.000000000636E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	636E000
Size:	36864

Details

Name:	00000005.00000002.557701865.0000000002980000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2980000
Size:	4096

Details

Name:	00000027.00000002.450371004.00007FF530F9B000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F9B000
Size:	24576

Details

Name:	00000005.00000003.339195375.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.370048128.0000000003A05000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A05000
Size:	8192

Details

Name:	00000000.00000002.306605015.0000000000DA0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DA0000
Size:	28672

Details

Name:	00000005.00000003.425205524.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.345504831.0000019BB183C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB183C000
Size:	98304

Details

Name:	00000019.00000003.369912312.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000002A.00000002.473460057.00000084E2BFF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E2BFF000
Size:	4096

Details

Name:	00000005.00000003.320507693.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	00000005.00000003.330598801.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000014.00000003.358625820.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000001E.00000003.387656889.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	28672

Details

Name:	00000004.00000002.335286924.0000000004DBC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DBC000
Size:	4096

Details

Name:	00000027.00000002.447778213.000001DB2EC00000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC00000
Size:	73728

Details

Name:	00000029.00000002.494184531.000000F17BAFE000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BAFE000
Size:	8192

Details

Name:	00000006.00000002.345542259.0000019BB1855000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1855000
Size:	24576

Details

Name:	00000015.00000002.374385151.00007FF5AEF3B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF3B000
Size:	8192

Details

Name:	00000015.00000002.372594495.000001C86A250000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A250000
Size:	4096

Details

Name:	00000019.00000002.390630496.0000000000F37000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F37000
Size:	36864

Details

Name:	0000001B.00000003.394292585.0000000001008000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1008000
Size:	4096

Details

Name:	00000005.00000003.366976546.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000011.00000000.345704963.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	00000019.00000003.364837448.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	49152

Details

Name:	00000019.00000003.372695696.0000000005C10000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C10000
Size:	16384

Details

Name:	00000014.00000002.380057634.0000000001470000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1470000
Size:	8192

Details

Name:	0000002A.00000003.472954700.00000270A8E9B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E9B000
Size:	28672

Details

Name:	00000004.00000002.334846672.000000000172E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	172E000
Size:	8192

Details

Name:	00000019.00000003.376708436.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	167936

Details

Name:	00000005.00000003.319636795.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	49152

Details

Name:	00000005.00000003.384299835.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000016.00000001.358466683.0000000001130000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000015.00000002.372540210.000001C86A200000.00000004.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C86A200000
Size:	4096

Details

Name:	00000000.00000003.289761595.0000000000DE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE2000
Size:	16384

Details

Name:	00000005.00000003.346228889.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000005.00000002.557403342.0000000001090000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1090000
Size:	36864

Details

Name:	00000005.00000003.340233292.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	184320

Details

Name:	00000005.00000002.556877351.0000000000FC4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FC4000
Size:	4096

Details

Name:	00000025.00000000.416096279.00007FF50DFC1000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFC1000
Size:	16384

Details

Name:	00000015.00000002.373986887.00007FF5AED37000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AED37000
Size:	12288

Details

Name:	0000001E.00000003.391269983.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	16384

Details

Name:	00000027.00000002.450384056.00007FF530FAC000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530FAC000
Size:	4096

Details

Name:	00000029.00000000.459701712.00007DF50FBE0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBE0000
Size:	4096

Details

Name:	00000019.00000002.391166699.0000000001830000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1830000
Size:	4096

Details

Name:	00000014.00000002.380373125.000000000394A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	394A000
Size:	8192

Details

Name:	0000001B.00000003.392136483.0000000001077000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1077000
Size:	12288

Details

Name:	0000002A.00000002.473414572.00000084E2AF9000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E2AF9000
Size:	28672

Details

Name:	0000000D.00000002.346154987.00000000015BE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15BE000
Size:	8192

Details

Name:	00000019.00000003.374464836.0000000005C50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C50000
Size:	8192

Details

Name:	00000014.00000002.379869996.00000000011C0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	00000005.00000003.348813593.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	0000002D.00000002.555979826.000002081A014000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2081A014000
Size:	32768

Details

Name:	00000029.00000003.483274422.0000024274953000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274953000
Size:	114688

Details

Name:	0000001B.00000003.392352919.0000000001022000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1022000
Size:	131072

Details

Name:	00000019.00000003.377307349.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	16384

Details

Name:	00000015.00000002.374269122.00007FF5AEEDC000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEEDC000
Size:	16384

Details

Name:	0000001E.00000003.390945568.00000000015AE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE000
Size:	258048

Details

Name:	0000001E.00000002.413723387.0000000005D7E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	8192

Details

Name:	0000001B.00000003.379551441.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000014.00000003.378242409.000000000396B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396B000
Size:	12288

Details

Name:	00000019.00000003.376916792.0000000005D90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D90000
Size:	12288

Details

Name:	00000005.00000002.560577744.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	4096

Details

Name:	00000005.00000002.560242225.000000000562E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	562E000
Size:	8192

Details

Name:	00000014.00000003.379103977.0000000003911000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3911000
Size:	24576

Details

Name:	0000000D.00000002.346229588.00000000015F0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	15F0000
Size:	8192

Details

Name:	00000029.00000002.495762155.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	4096

Details

Name:	00000015.00000002.373060984.000001C86C116000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C116000
Size:	8192

Details

Name:	00000005.00000003.425026926.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000002.335161724.000000000418C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	418C000
Size:	4096

Details

Name:	00000011.00000000.345860732.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000029.00000003.478679633.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	397312

Details

Name:	0000000D.00000003.345604565.0000000005950000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5950000
Size:	16384

Details

Name:	00000019.00000002.390885227.00000000015CE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE000
Size:	8192

Details

Name:	0000001E.00000002.408857980.0000000001C60000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C60000
Size:	4096

Details

Name:	00000027.00000003.447193226.000001DB2EC50000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC50000
Size:	118784

Details

Name:	00000019.00000003.376317844.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000014.00000003.370102647.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000005.00000003.324701243.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.364908123.0000000001680000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1680000
Size:	40960

Details

Name:	00000005.00000002.560800777.00000000065BE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	65BE000
Size:	8192

Details

Name:	00000004.00000003.331377875.0000000004CEF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEF000
Size:	16384

Details

Name:	00000004.00000003.330700592.0000000004CFA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFA000
Size:	8192

Details

Name:	0000001E.00000003.390125646.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001E.00000003.388020026.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.337739134.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	49152

Details

Name:	00000006.00000000.331432213.0000019BB1770000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1770000
Size:	102400

Details

Name:	00000019.00000003.370365686.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	49152

Details

Name:	0000001E.00000002.408914240.00000000030B3000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30B3000
Size:	4096

Details

Name:	00000014.00000003.359045997.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000020.00000002.413321763.00000239ED250000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ED250000
Size:	4096

Details

Name:	00000015.00000002.373123242.000001C86C330000.00000004.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C86C330000
Size:	4096

Details

Name:	00000019.00000002.391661667.0000000003400000.00000040.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.498194131.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.386997886.00000000054A1000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A1000
Size:	172032

Details

Name:	0000001E.00000002.413797061.0000000006540000.00000040.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	6540000
Size:	4096

Details

Name:	00000029.00000002.494146123.000000F17B7AC000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17B7AC000
Size:	16384

Details

Name:	00000004.00000002.334967870.000000000293F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	293F000
Size:	4096

Details

Name:	00000004.00000003.330836383.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000025.00000002.429038652.00007FF50DECF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DECF000
Size:	12288

Details

Name:	00000015.00000002.372448739.00000086CBCF7000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBCF7000
Size:	36864

Details

Name:	00000005.00000003.551343720.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000027.00000002.447725960.000001DB2EBC0000.00000004.00000020.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1DB2EBC0000
Size:	8192

Details

Name:	0000001E.00000002.414036312.000000007FBE0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBE0000
Size:	12288

Details

Name:	00000019.00000003.374344831.0000000005C31000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C31000
Size:	57344

Details

Name:	00000029.00000003.477248753.0000024274F63000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274F63000
Size:	397312

Details

Name:	00000019.00000003.372788823.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	36864

Details

Name:	00000029.00000002.496053896.00007FF501AE7000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501AE7000
Size:	4096

Details

Name:	00000027.00000002.449919797.00007DF53EDB0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDB0000
Size:	4096

Details

Name:	00000015.00000002.374243098.00007FF5AEE87000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEE87000
Size:	4096

Details

Name:	0000002D.00000002.557256335.00007FF579753000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579753000
Size:	8192

Details

Name:	00000005.00000003.321197411.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	12288

Details

Name:	00000000.00000003.305836829.0000000000DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC9000
Size:	143360

Details

Name:	00000014.00000002.380454962.00000000039AF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	39AF000
Size:	20480

Details

Name:	00000005.00000003.322868515.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.375191858.00007FF5AF06A000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF06A000
Size:	4096

Details

Name:	00000029.00000002.496313282.00007FF501CDF000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501CDF000
Size:	4096

Details

Name:	0000001C.00000003.374591767.0000000002440000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2440000
Size:	16384

Details

Name:	00000000.00000003.289679630.0000000000DF7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DF7000
Size:	32768

Details

Name:	00000006.00000002.345079362.0000019BB17F0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB17F0000
Size:	4096

Details

Name:	0000002D.00000000.544380618.00007DF5874B0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874B0000
Size:	4096

Details

Name:	00000011.00000000.364287297.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	00000005.00000003.385233749.0000000004B5E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5E000
Size:	8192

Details

Name:	00000019.00000003.364665213.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	53248

Details

Name:	00000025.00000002.428191793.0000015A7FD02000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FD02000
Size:	12288

Details

Name:	00000014.00000003.379179210.0000000003934000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3934000
Size:	4096

Details

Name:	00000015.00000002.375219733.00007FF5AF06E000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF06E000
Size:	8192

Details

Name:	0000001E.00000003.389414722.0000000005B80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B80000
Size:	8192

Details

Name:	0000001B.00000002.397397244.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	4096

Details

Name:	0000001C.00000002.376721975.0000000000A00000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A00000
Size:	8192

Details

Name:	00000004.00000003.330864610.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000015.00000000.354265785.00007DF5BCCD0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCD0000
Size:	4096

Details

Name:	00000014.00000002.380269327.0000000002170000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2170000
Size:	36864

Details

Name:	00000005.00000002.559399157.000000000500C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	500C000
Size:	12288

Details

Name:	0000002A.00000002.473811219.00000270A9050000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A9050000
Size:	16384

Details

Name:	0000002D.00000002.557202164.00007FF57974D000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57974D000
Size:	4096

Details

Name:	00000010.00000002.348478946.0000000002F20000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2F20000
Size:	8192

Details

Name:	00000005.00000002.556900102.0000000000FCD000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FCD000
Size:	4096

Details

Name:	00000029.00000003.466564841.000002427498B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427498B000
Size:	4096

Details

Name:	00000029.00000003.474663679.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	159744

Details

Name:	00000005.00000003.317777801.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000019.00000003.377437297.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	16384

Details

Name:	00000005.00000002.559318921.0000000004FFA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FFA000
Size:	4096

Details

Name:	00000005.00000003.331755697.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000002.306324686.00000000008D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8D0000
Size:	102400

Details

Name:	00000014.00000003.359524868.0000000004899000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4899000
Size:	221184

Details

Name:	00000005.00000003.325689066.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	32768

Details

Name:	00000004.00000003.330682031.0000000004D1A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D1A000
Size:	12288

Details

Name:	00000015.00000002.372802889.000001C86A485000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C86A485000
Size:	20480

Details

Name:	0000001E.00000002.409067692.00000000030CD000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30CD000
Size:	4096

Details

Name:	00000020.00000002.413409297.00007DF50B7B0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7B0000
Size:	4096

Details

Name:	00000005.00000003.322255789.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	4096

Details

Name:	0000002D.00000002.555661957.0000020819FB8000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20819FB8000
Size:	32768

Details

Name:	0000002D.00000002.555229370.0000020819F30000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20819F30000
Size:	102400

Details

Name:	0000002A.00000002.473548351.00000270A8E00000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A8E00000
Size:	12288

Details

Name:	00000029.00000002.497716056.00007FF501F71000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F71000
Size:	32768

Details

Name:	0000001B.00000000.370651983.00000000011DB000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	0000001B.00000003.391786037.000000000101F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101F000
Size:	8192

Details

Name:	00000005.00000003.321408854.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	8192

Details

Name:	0000001E.00000003.387289771.00000000015E2000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E2000
Size:	8192

Details

Name:	00000006.00000002.346962078.00007FF50C48B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C48B000
Size:	12288

Details

Name:	0000001E.00000002.409704663.0000000003240000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3240000
Size:	28672

Details

Name:	0000001E.00000002.411557214.0000000003271000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3271000
Size:	49152

Details

Name:	00000029.00000002.496378788.00007FF501D31000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D31000
Size:	12288

Details

Name:	00000005.00000003.425047138.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.375554670.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	57344

Details

Name:	00000020.00000000.400548140.00007DF50B7B0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7B0000
Size:	4096

Details

Name:	00000005.00000003.535373186.0000000004B5B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5B000
Size:	8192

Details

Name:	00000010.00000003.347173382.0000000005560000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5560000
Size:	16384

Details

Name:	00000014.00000002.379567562.0000000000C3A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C3A000
Size:	24576

Details

Name:	00000005.00000003.384147805.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002A.00000000.461147869.00007DF543D10000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D10000
Size:	4096

Details

Name:	00000029.00000002.494279848.000000F17BDFC000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BDFC000
Size:	16384

Details

Name:	00000020.00000002.413015078.00000239ECC00000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC00000
Size:	73728

Details

Name:	0000001E.00000003.390216041.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	65536

Details

Name:	00000011.00000002.555394657.0000024B7C990000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	0000002D.00000002.555632287.0000020819FB0000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20819FB0000
Size:	28672

Details

Name:	0000001B.00000002.397193647.0000000001BCE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BCE000
Size:	8192

Details

Name:	00000029.00000003.473165070.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	147456

Details

Name:	0000001B.00000003.394843872.0000000001013000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1013000
Size:	8192

Details

Name:	00000005.00000002.556857468.0000000000FC3000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FC3000
Size:	4096

Details

Name:	0000000D.00000002.346800474.0000000003137000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3137000
Size:	4096

Details

Name:	00000005.00000002.559453983.0000000005030000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5030000
Size:	4096

Details

Name:	0000000D.00000002.346446606.0000000001824000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1824000
Size:	24576

Details

Name:	00000025.00000002.429047050.00007FF50DED3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DED3000
Size:	28672

Details

Name:	0000000D.00000002.346855365.00000000031A0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31A0000
Size:	4096

Details

Name:	00000005.00000003.540971086.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000004.00000002.335172710.00000000048CE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	48CE000
Size:	8192

Details

Name:	0000001B.00000003.393442277.0000000001015000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1015000
Size:	4096

Details

Name:	00000027.00000002.452264803.00007FF531053000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531053000
Size:	28672

Details

Name:	0000001E.00000003.387539424.000000000159E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159E000
Size:	16384

Details

Name:	00000005.00000003.338138896.0000000006415000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6415000
Size:	8192

Details

Name:	00000027.00000002.449148483.000001DB2EC55000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC55000
Size:	98304

Details

Name:	00000010.00000002.348029398.0000000000F9A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F9A000
Size:	4096

Details

Name:	00000029.00000002.496398121.00007FF501D35000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D35000
Size:	12288

Details

Name:	00000029.00000002.495340244.00000242740E0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740E0000
Size:	77824

Details

Name:	0000001E.00000003.403692893.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	65536

Details

Name:	0000002D.00000003.544934605.0000020819FFE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20819FFE000
Size:	4096

Details

Name:	00000005.00000003.338533332.00000000066C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	66C0000
Size:	12288

Details

Name:	0000001C.00000002.376632018.00000000009E0000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	9E0000
Size:	8192

Details

Name:	00000029.00000003.480641139.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	8192

Details

Name:	00000000.00000003.300895238.0000000007444000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7444000
Size:	8192

Details

Name:	00000029.00000003.475466565.000002427499C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499C000
Size:	36864

Details

Name:	00000019.00000003.375429314.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	28672

Details

Name:	0000001C.00000002.375404340.0000000000500000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	500000
Size:	4096

Details

Name:	00000005.00000002.557317296.000000000107C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	107C000
Size:	4096

Details

Name:	00000019.00000002.390823836.0000000001450000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1450000
Size:	16384

Details

Name:	0000002D.00000002.557318006.00007FF579763000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579763000
Size:	12288

Details

Name:	00000015.00000002.372348167.00000086CB389000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CB389000
Size:	28672

Details

Name:	00000005.00000003.326045849.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000011.00000000.363269093.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000005.00000002.559770597.0000000005180000.00000040.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5180000
Size:	4096

Details

Name:	0000001B.00000003.393483647.0000000001019000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1019000
Size:	8192

Details

Name:	00000005.00000003.337464980.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	12288

Details

Name:	00000005.00000003.383998845.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.371343351.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	135168

Details

Name:	00000029.00000003.469597081.000002427498D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427498D000
Size:	4096

Details

Name:	00000011.00000000.346560664.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	00000005.00000002.559256959.0000000004FF4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF4000
Size:	8192

Details

Name:	00000019.00000003.374521033.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	0000002D.00000002.556657472.00007DF5874A2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874A2000
Size:	4096

Details

Name:	00000019.00000003.376997708.0000000005D80000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	65536

Details

Name:	00000005.00000003.338770330.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.318732939.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	49152

Details

Name:	00000005.00000003.337524786.0000000005638000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5638000
Size:	32768

Details

Name:	00000005.00000003.460061065.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	0000002A.00000000.461184896.00007DF543D20000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D20000
Size:	4096

Details

Name:	00000005.00000003.354028967.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000029.00000002.495550650.0000024274802000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274802000
Size:	4096

Details

Name:	0000002D.00000002.555046690.00000079190F9000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	79190F9000
Size:	28672

Details

Name:	00000019.00000002.394343612.00000000068EE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68EE000
Size:	8192

Details

Name:	00000029.00000003.469057919.0000024274E03000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E03000
Size:	241664

Details

Name:	0000001E.00000003.388754860.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	0000001B.00000002.397038548.00000000011C1000.00000008.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C1000
Size:	4096

Details

Name:	00000010.00000002.348397174.00000000016B1000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16B1000
Size:	45056

Details

Name:	0000001E.00000002.408706404.00000000018DE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18DE000
Size:	8192

Details

Name:	00000019.00000003.370974206.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000006.00000002.346856273.00007FF50C467000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C467000
Size:	16384

Details

Name:	00000005.00000002.559483199.00000000050B5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50B5000
Size:	12288

Details

Name:	00000005.00000003.316503439.0000000000E38000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E38000
Size:	40960

Details

Name:	00000027.00000002.449760272.000001DB2F250000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2F250000
Size:	4096

Details

Name:	0000001B.00000003.379584677.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	0000002A.00000002.474212394.00007FF53602A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53602A000
Size:	8192

Details

Name:	00000006.00000002.346646691.00007FF50C437000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C437000
Size:	4096

Details

Name:	00000004.00000003.331224349.0000000004CFA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFA000
Size:	8192

Details

Name:	00000014.00000003.358695829.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000004.00000002.335316108.00000000FF5B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF5B0000
Size:	20480

Details

Name:	00000005.00000003.320685975.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000010.00000002.348471007.0000000001A60000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A60000
Size:	4096

Details

Name:	0000001B.00000003.395354969.000000000100E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	00000019.00000002.390876093.0000000001580000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1580000
Size:	8192

Details

Name:	00000011.00000000.345774974.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	00000011.00000000.345422737.0000024B7C820000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000011.00000000.345687154.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000006.00000002.344508411.000000725A27F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	725A27F000
Size:	4096

Details

Name:	0000001B.00000003.392058619.0000000001076000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1076000
Size:	16384

Details

Name:	00000015.00000002.373133449.000001C86C370000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86C370000
Size:	8192

Details

Name:	00000010.00000002.348149215.0000000001290000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1290000
Size:	32768

Details

Name:	00000029.00000002.495434887.0000024274116000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274116000
Size:	8192

Details

Name:	00000010.00000003.347143806.0000000005564000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5564000
Size:	45056

Details

Name:	00000005.00000003.536171954.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.377389542.000000000399B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	399B000
Size:	8192

Details

Name:	00000019.00000003.370690355.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	49152

Details

Name:	00000006.00000002.347027858.00007FF50C4B7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C4B7000
Size:	8192

Details

Name:	00000004.00000002.335302424.0000000004EA2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA2000
Size:	4096

Details

Name:	0000001C.00000002.374865157.0000000000152000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	152000
Size:	28672

Details

Name:	00000025.00000002.427898434.0000015A7FC00000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC00000
Size:	73728

Details

Name:	00000005.00000003.384130198.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000002.397331770.0000000003B20000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3B20000
Size:	8192

Details

Name:	00000005.00000003.457079544.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	0000001B.00000003.391678053.0000000001021000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1021000
Size:	512000

Details

Name:	0000001B.00000000.371072024.00000000FF9C0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C0000
Size:	12288

Details

Name:	0000002D.00000002.554877753.0000007918E7C000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7918E7C000
Size:	16384

Details

Name:	00000005.00000003.339260116.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.389974923.0000000005DB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DB0000
Size:	65536

Details

Name:	0000001E.00000003.388941074.0000000005B70000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	16384

Details

Name:	00000005.00000003.322280911.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000015.00000003.355447578.000001C86C107000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C107000
Size:	4096

Details

Name:	0000002D.00000002.556161379.000002081A2F0000.00000004.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2081A2F0000
Size:	4096

Details

Name:	0000001B.00000003.383156584.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000005.00000003.434592234.0000000006375000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6375000
Size:	8192

Details

Name:	00000029.00000002.495078480.0000024274059000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274059000
Size:	8192

Details

Name:	00000020.00000002.412882201.00000239ECB70000.00000004.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	239ECB70000
Size:	4096

Details

Name:	00000000.00000003.289686306.0000000000DDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDD000
Size:	106496

Details

Name:	00000029.00000003.469169173.0000024274975000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274975000
Size:	65536

Details

Name:	00000005.00000002.554850723.0000000000150000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	150000
Size:	4096

Details

Name:	00000020.00000002.414108251.00007FF4FDA8B000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA8B000
Size:	12288

Details

Name:	00000004.00000002.335180194.0000000004CCE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CCE000
Size:	8192

Details

Name:	00000005.00000003.424904771.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.499914758.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000015.00000002.374867823.00007FF5AEFF1000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFF1000
Size:	20480

Details

Name:	00000015.00000003.355398450.000001C86C108000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C108000
Size:	90112

Details

Name:	0000001E.00000003.387394857.000000000159F000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159F000
Size:	12288

Details

Name:	00000029.00000002.497408897.00007FF501EFA000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EFA000
Size:	8192

Details

Name:	00000005.00000003.337500573.00000000061A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	61A0000
Size:	40960

Details

Name:	0000001E.00000003.388469891.00000000015E4000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E4000
Size:	32768

Details

Name:	0000001B.00000003.386496431.00000000010A9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A9000
Size:	8192

Details

Name:	00000004.00000002.335120143.0000000004030000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4030000
Size:	4096

Details

Name:	00000005.00000002.560132871.0000000005430000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5430000
Size:	36864

Details

Name:	00000000.00000002.307587796.0000000004710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4710000
Size:	4096

Details

Name:	00000019.00000003.374294880.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	0000001E.00000003.403391970.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000002.560735935.0000000006550000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	6550000
Size:	4096

Details

Name:	0000001B.00000002.396147252.0000000000E8E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E8E000
Size:	8192

Details

Name:	0000000D.00000002.346007042.00000000012F9000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F9000
Size:	28672

Details

Name:	0000001E.00000003.389671708.00000000015EA000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15EA000
Size:	16384

Details

Name:	00000014.00000003.356044097.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000004.00000003.311343008.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000014.00000003.355134074.0000000003911000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3911000
Size:	204800

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000000.00000000.289033816.00000000001F1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1F1000
Size:	200704

Details

Name:	00000011.00000000.362868887.0000024B7C830000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	00000019.00000003.364928316.0000000001668000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1668000
Size:	16384

Details

Name:	0000000A.00000002.337146850.00000000011C0000.00000008.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000005.00000002.559205940.0000000004FE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FE0000
Size:	28672

Details

Name:	00000004.00000003.322808416.0000000004D55000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D55000
Size:	16384

Details

Name:	00000016.00000000.358283071.00000000007C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	102400

Details

Name:	0000001C.00000002.375273826.00000000003FE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3FE000
Size:	4096

Details

Name:	0000001E.00000003.391098199.0000000005D40000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	65536

Details

Name:	00000005.00000003.319578517.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000004.00000003.322009799.0000000004D5F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5F000
Size:	53248

Details

Name:	00000005.00000002.560258652.0000000005630000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5630000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara signature match	System Summary

Details

Name:	00000000.00000003.305540930.0000000000E0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0F000
Size:	4096

Details

Name:	0000001E.00000002.405613083.00000000009F0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9F0000
Size:	8192

Details

Name:	00000000.00000002.306852018.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	8192

Details

Name:	0000001E.00000003.389555357.00000000015A3000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	00000006.00000002.345832483.00007DF51A1A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1A0000
Size:	4096

Details

Name:	0000001E.00000003.387747844.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	65536

Details

Name:	00000005.00000003.340426546.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000025.00000002.429315667.00007FF50DFA4000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFA4000
Size:	20480

Details

Name:	0000000D.00000002.347114421.0000000005970000.00000040.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5970000
Size:	4096

Details

Name:	00000005.00000003.489387967.000000000636D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	636D000
Size:	122880

Details

Name:	00000025.00000002.427946145.0000015A7FC2A000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC2A000
Size:	4096

Details

Name:	00000005.00000003.375283653.0000000006BD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BD0000
Size:	4096

Details

Name:	00000029.00000003.483364487.00000242749A8000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A8000
Size:	8192

Details

Name:	00000011.00000000.345575333.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	49152

Details

Name:	0000001E.00000003.388164792.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000006.00000002.346413109.00007FF50C310000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C310000
Size:	4096

Details

Name:	00000005.00000003.332170174.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000025.00000002.429345824.00007FF50DFB1000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFB1000
Size:	32768

Details

Name:	00000019.00000003.376202046.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	45056

Details

Name:	00000005.00000003.352212567.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000015.00000002.372691345.000001C86A2BB000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A2BB000
Size:	4096

Details

Name:	00000029.00000002.495827951.00007DF40DAB0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF40DAB0000
Size:	20480

Details

Name:	00000019.00000003.389835837.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000002D.00000002.557598989.00007FF57983A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57983A000
Size:	4096

Details

Name:	00000004.00000003.330812085.0000000004CE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE2000
Size:	4096

Details

Name:	00000010.00000002.348068025.00000000010F9000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10F9000
Size:	28672

Details

Name:	00000019.00000003.369263877.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.457199873.0000000006393000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6393000
Size:	4096

Details

Name:	0000000D.00000002.346296364.0000000001814000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1814000
Size:	4096

Details

Name:	00000005.00000003.318924192.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	36864

Details

Name:	0000001B.00000000.370918904.00000000FF9A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9A0000
Size:	4096

Details

Name:	00000005.00000003.425543832.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	126976

Details

Name:	00000011.00000000.364430444.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	00000005.00000000.315344893.0000000000160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	160000
Size:	102400

Details

Name:	0000001B.00000003.382728309.0000000004721000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4721000
Size:	860160

Details

Name:	00000029.00000002.495795668.0000024274E00000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E00000
Size:	8192

Details

Name:	00000000.00000002.307089682.0000000002E20000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E20000
Size:	8192

Details

Name:	00000027.00000002.447833562.000001DB2EC13000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC13000
Size:	90112

Details

Name:	00000016.00000000.358439449.00000000FF8C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8C0000
Size:	12288

Details

Name:	00000014.00000002.380574525.0000000003CE4000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3CE4000
Size:	8192

Details

Name:	00000006.00000002.344466834.000000725A177000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	725A177000
Size:	36864

Details

Name:	00000005.00000003.536790404.0000000006370000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6370000
Size:	36864

Details

Name:	00000029.00000002.497460703.00007FF501EFD000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EFD000
Size:	12288

Details

Name:	00000000.00000003.305778181.0000000000E85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E85000
Size:	61440

Details

Name:	00000005.00000003.340368090.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.340272238.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.392769900.000000000102C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102C000
Size:	24576

Details

Name:	00000029.00000003.475093935.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000019.00000002.394436129.000000007FBE0000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FBE0000
Size:	4096

Details

Name:	00000005.00000003.425185208.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.392103018.0000000001056000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1056000
Size:	4096

Details

Name:	00000029.00000003.480330811.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	12288

Details

Name:	00000005.00000003.536288855.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.416285861.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.311199668.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.340254135.0000000004B61000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B61000
Size:	16384

Details

Name:	0000001B.00000002.396124535.0000000000D50000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000001E.00000003.387530784.0000000001593000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1593000
Size:	20480

Details

Name:	00000005.00000003.339155320.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.329953660.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000005.00000003.434534822.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	126976

Details

Name:	00000005.00000003.317229730.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000029.00000003.478664738.0000024274979000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274979000
Size:	8192

Details

Name:	00000015.00000003.371970132.000001C86A2BC000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A2BC000
Size:	20480

Details

Name:	00000029.00000003.493774162.0000024274052000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274052000
Size:	20480

Details

Name:	0000001E.00000002.409565114.0000000003230000.00000040.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	3230000
Size:	4096

Details

Name:	0000000D.00000002.346889848.00000000032AE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32AE000
Size:	8192

Details

Name:	00000005.00000003.353614685.0000000006940000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6940000
Size:	32768

Details

Name:	00000011.00000000.363087764.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	00000005.00000002.559599555.0000000005100000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5100000
Size:	4096

Details

Name:	00000014.00000003.356115170.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000004.00000003.313914024.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000019.00000003.375026281.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.392417040.0000000005C00000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C00000
Size:	8192

Details

Name:	00000020.00000003.412449362.00000239ECC4D000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC4D000
Size:	139264

Details

Name:	00000004.00000001.305485535.0000000001130000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000006.00000002.345473570.0000019BB1829000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1829000
Size:	73728

Details

Name:	0000001B.00000002.397004228.00000000011B2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	00000015.00000002.374600391.00007FF5AEF97000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF97000
Size:	16384

Details

Name:	00000020.00000002.412756897.00000052E3C7B000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3C7B000
Size:	20480

Details

Name:	00000005.00000002.559648348.0000000005130000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5130000
Size:	8192

Details

Name:	00000004.00000002.335140782.0000000004104000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4104000
Size:	8192

Details

Name:	0000001E.00000002.408872170.00000000030A0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30A0000
Size:	8192

Details

Name:	0000000D.00000002.346753923.0000000001D00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D00000
Size:	4096

Details

Name:	00000015.00000002.372469350.00000086CBEFE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBEFE000
Size:	8192

Details

Name:	00000000.00000002.306405617.00000000009CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9CE000
Size:	8192

Details

Name:	00000029.00000002.496360526.00007FF501D06000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D06000
Size:	16384

Details

Name:	00000027.00000002.450161548.00007FF530DC5000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530DC5000
Size:	8192

Details

Name:	0000001E.00000002.413872147.000000007FA60000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FA60000
Size:	4096

Details

Name:	00000014.00000003.378373750.000000000394C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	394C000
Size:	24576

Details

Name:	00000019.00000003.374743334.000000000161E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161E000
Size:	16384

Details

Name:	0000002A.00000002.473770357.00000270A8E9B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E9B000
Size:	28672

Details

Name:	0000001B.00000003.394426019.0000000001011000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1011000
Size:	16384

Details

Name:	00000004.00000003.316291992.0000000004EE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE2000
Size:	12288

Details

Name:	00000027.00000002.452399306.00007FF531093000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531093000
Size:	24576

Details

Name:	00000005.00000003.338890088.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.346174374.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	00000029.00000003.462438049.00000242746C0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242746C0000
Size:	4096

Details

Name:	00000029.00000003.471242524.0000024274975000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274975000
Size:	4096

Details

Name:	00000029.00000002.495535084.00000242746D0000.00000004.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	242746D0000
Size:	8192

Details

Name:	00000020.00000002.413659238.00007FF4FD92B000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD92B000
Size:	8192

Details

Name:	0000001E.00000002.410976566.0000000003254000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3254000
Size:	8192

Details

Name:	0000000D.00000003.345479533.0000000005900000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5900000
Size:	65536

Details

Name:	00000020.00000002.413564570.00007FF4FD627000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD627000
Size:	32768

Details

Name:	00000005.00000003.322724686.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.555506786.0000000000522000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	522000
Size:	98304

Details

Name:	00000014.00000000.348886349.00000000FFAA0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAA0000
Size:	4096

Details

Name:	0000001E.00000003.389870983.00000000015EA000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15EA000
Size:	12288

Details

Name:	00000014.00000003.364695013.00000000039CB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39CB000
Size:	8192

Details

Name:	00000004.00000002.335108099.0000000004010000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4010000
Size:	12288

Details

Name:	00000005.00000002.560600183.0000000006352000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6352000
Size:	40960

Details

Name:	00000005.00000002.557342727.000000000107F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	107F000
Size:	4096

Details

Name:	0000001B.00000002.396191101.0000000000F10000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F10000
Size:	12288

Details

Name:	00000027.00000002.452560623.00007FF531141000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531141000
Size:	16384

Details

Name:	00000005.00000003.366508760.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000014.00000003.358792129.0000000004831000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4831000
Size:	217088

Details

Name:	00000005.00000003.322701379.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000003.347045656.0000000005580000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5580000
Size:	65536

Details

Name:	00000029.00000002.496339271.00007FF501CE5000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501CE5000
Size:	4096

Details

Name:	00000019.00000003.371979405.000000000161C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161C000
Size:	36864

Details

Name:	00000005.00000003.319609139.0000000000E47000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E47000
Size:	40960

Details

Name:	0000001E.00000002.411660631.0000000003297000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3297000
Size:	32768

Details

Name:	00000014.00000003.379007241.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	0000001E.00000003.388219602.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001B.00000003.394689426.000000000102A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	00000029.00000002.495875197.00007DF50FBF0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBF0000
Size:	4096

Details

Name:	00000014.00000002.379968355.0000000001370000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1370000
Size:	4096

Details

Name:	00000019.00000003.364280737.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	180224

Details

Name:	0000002A.00000002.473871464.00000270A9190000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A9190000
Size:	36864

Details

Name:	00000019.00000002.390995917.000000000164B000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	00000014.00000003.379208476.0000000003918000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3918000
Size:	8192

Details

Name:	00000005.00000003.338681510.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.380674926.00000000FFAA2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAA2000
Size:	4096

Details

Name:	00000019.00000002.394517531.000000007FD40000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD40000
Size:	4096

Details

Name:	00000015.00000002.374615797.00007FF5AEF9E000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF9E000
Size:	28672

Details

Name:	00000005.00000003.535924992.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.375053834.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.339218165.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.322394530.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	65536

Details

Name:	00000019.00000002.391070729.00000000017D0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17D0000
Size:	16384

Details

Name:	00000027.00000002.451528444.00007FF531049000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531049000
Size:	8192

Details

Name:	00000019.00000002.391378636.0000000003260000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3260000
Size:	20480

Details

Name:	00000004.00000003.330788254.0000000004CEE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CEE000
Size:	32768

Details

Name:	0000001B.00000002.395758762.00000000005D0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5D0000
Size:	102400

Details

Name:	0000001E.00000003.388736173.0000000005B70000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	61440

Details

Name:	00000005.00000003.536419611.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	155648

Details

Name:	00000005.00000003.324617681.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.346919725.0000000003350000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3350000
Size:	8192

Details

Name:	00000011.00000000.345806932.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	00000005.00000002.556279118.0000000000E08000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E08000
Size:	503808

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.301726330.0000000000E0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000005.00000002.560998529.000000000697D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	697D000
Size:	12288

Details

Name:	0000001B.00000003.385690607.00000000010C3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C3000
Size:	98304

Details

Name:	00000015.00000003.371639752.000001C86C118000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C118000
Size:	4096

Details

Name:	00000011.00000000.345615863.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000029.00000002.494229717.000000F17BCF7000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BCF7000
Size:	36864

Details

Name:	00000029.00000002.495989760.00007FF5018E7000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5018E7000
Size:	12288

Details

Name:	0000001B.00000003.379635190.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	0000001B.00000003.382647997.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000015.00000003.355418687.000001C86C129000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C129000
Size:	12288

Details

Name:	00000029.00000002.494839783.0000024273E80000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273E80000
Size:	4096

Details

Name:	0000001B.00000003.379479994.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000029.00000003.481728032.000002427497F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497F000
Size:	24576

Details

Name:	00000019.00000002.392068839.0000000005850000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5850000
Size:	4096

Details

Name:	00000025.00000002.427666242.0000001631FFF000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1631FFF000
Size:	4096

Details

Name:	00000025.00000000.415943421.00007DF51BC22000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC22000
Size:	4096

Details

Name:	00000029.00000000.459725259.00007DF50FBF0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBF0000
Size:	4096

Details

Name:	00000019.00000002.392694775.0000000005C90000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C90000
Size:	733184

Details

Name:	00000029.00000002.495589530.0000024274916000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274916000
Size:	4096

Details

Name:	00000015.00000002.373637292.00007FF5AEAC6000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEAC6000
Size:	4096

Details

Name:	0000001E.00000003.387223623.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	159744

Details

Name:	0000001E.00000002.413195523.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	12288

Details

Name:	00000004.00000002.335114432.0000000004020000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4020000
Size:	8192

Details

Name:	00000015.00000002.372614689.000001C86A278000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A278000
Size:	122880

Details

Name:	00000005.00000003.341360890.0000000006356000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6356000
Size:	36864

Details

Name:	00000027.00000002.452539611.00007FF531131000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531131000
Size:	32768

Details

Name:	00000011.00000002.556150316.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	00000019.00000003.364716346.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	49152

Details

Name:	00000020.00000002.413232518.00000239ECD00000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECD00000
Size:	4096

Details

Name:	0000001B.00000003.394631125.0000000001019000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1019000
Size:	8192

Details

Name:	00000005.00000003.345596483.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	00000000.00000002.307593191.0000000004F10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F10000
Size:	4096

Details

Name:	00000027.00000002.449802492.00007DF43CC70000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF43CC70000
Size:	20480

Details

Name:	00000004.00000003.322110283.0000000004D59000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D59000
Size:	12288

Details

Name:	00000005.00000003.319831899.00000000051E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E0000
Size:	24576

Details

Name:	00000005.00000003.319042348.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	45056

Details

Name:	00000014.00000002.379849278.00000000011B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	00000010.00000002.348354116.000000000168E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	168E000
Size:	8192

Details

Name:	00000000.00000003.300761340.0000000007444000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7444000
Size:	8192

Details

Name:	00000000.00000002.306450762.0000000000BA8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BA8000
Size:	4096

Details

Name:	00000004.00000003.325295901.0000000004D34000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D34000
Size:	4096

Details

Name:	00000014.00000003.356017275.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000004.00000003.330822821.0000000004D0D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D0D000
Size:	20480

Details

Name:	0000001B.00000003.394535777.0000000000FF1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF1000
Size:	24576

Details

Name:	00000015.00000002.375236306.00007FF5AF071000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF071000
Size:	16384

Details

Name:	00000014.00000003.379260742.0000000003974000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3974000
Size:	8192

Details

Name:	00000019.00000002.390856004.0000000001570000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1570000
Size:	12288

Details

Name:	0000001B.00000003.385839961.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000020.00000000.400582605.00007DF50B7C0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7C0000
Size:	12288

Details

Name:	0000001C.00000002.374841949.0000000000150000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	4096

Details

Name:	0000002A.00000002.474352984.00007FF5360B1000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5360B1000
Size:	16384

Details

Name:	00000005.00000003.321365161.0000000005420000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5420000
Size:	12288

Details

Name:	0000001E.00000002.413758832.0000000005DFE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DFE000
Size:	8192

Details

Name:	0000002D.00000002.557273629.00007FF579756000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579756000
Size:	16384

Details

Name:	00000004.00000003.321329384.0000000004D5C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5C000
Size:	65536

Details

Name:	00000027.00000002.449645917.000001DB2ED08000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2ED08000
Size:	24576

Details

Name:	00000005.00000003.318436879.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000020.00000002.413740071.00007FF4FD9C1000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9C1000
Size:	12288

Details

Name:	0000001E.00000003.387499143.00000000015A2000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A2000
Size:	8192

Details

Name:	00000027.00000002.447698798.000001DB2EB90000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EB90000
Size:	12288

Details

Name:	00000000.00000002.306289036.0000000000251000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251000
Size:	36864

Details

Name:	00000000.00000002.307552558.000000000335E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	335E000
Size:	8192

Details

Name:	00000014.00000002.380611046.0000000004899000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4899000
Size:	4096

Details

Name:	00000011.00000002.556015935.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000005.00000003.339310119.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.345454233.0000019BB1827000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1827000
Size:	4096

Details

Name:	0000001B.00000003.395370767.0000000001012000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1012000
Size:	4096

Details

Name:	00000005.00000003.416318285.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.497765555.00007FF501F80000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F80000
Size:	20480

Details

Name:	00000029.00000003.463884646.000002427495A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427495A000
Size:	53248

Details

Name:	00000029.00000003.471415163.0000024274975000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274975000
Size:	4096

Details

Name:	00000014.00000003.377592725.0000000003966000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3966000
Size:	32768

Details

Name:	00000004.00000002.334853351.0000000001740000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1740000
Size:	16384

Details

Name:	00000005.00000003.324543818.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000002.335156826.0000000004186000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4186000
Size:	4096

Details

Name:	0000001B.00000002.395952457.00000000007EC000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7EC000
Size:	8192

Details

Name:	0000001E.00000003.388265086.0000000005A61000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A61000
Size:	61440

Details

Name:	00000005.00000003.535394928.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.373023620.000001C86C106000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C106000
Size:	8192

Details

Name:	00000014.00000003.359323909.0000000004866000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4866000
Size:	430080

Details

Name:	00000005.00000002.559584802.00000000050EF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50EF000
Size:	4096

Details

Name:	0000001B.00000003.382920141.0000000004721000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4721000
Size:	217088

Details

Name:	0000002D.00000002.556069868.000002081A1A0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2081A1A0000
Size:	12288

Details

Name:	00000029.00000002.494412601.000000F17C278000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17C278000
Size:	32768

Details

Name:	00000005.00000003.339796713.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.560758114.0000000006560000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6560000
Size:	12288

Details

Name:	00000015.00000002.372402028.00000086CB7FE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CB7FE000
Size:	8192

Details

Name:	0000001E.00000003.388320809.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000000.00000003.300268570.0000000000E13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E13000
Size:	167936

Details

Name:	00000019.00000003.364653448.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	0000002D.00000002.557563841.00007FF579831000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579831000
Size:	12288

Details

Name:	0000001E.00000003.387550478.0000000001591000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1591000
Size:	32768

Details

Name:	00000005.00000003.338780929.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000002.306366062.0000000000927000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	927000
Size:	36864

Details

Name:	00000010.00000000.344771247.000000007FA40000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA40000
Size:	4096

Details

Name:	00000004.00000003.331386109.0000000004187000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4187000
Size:	4096

Details

Name:	00000006.00000002.346589185.00007FF50C3C1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C3C1000
Size:	12288

Details

Name:	00000005.00000003.318837366.00000000051A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A0000
Size:	32768

Details

Name:	00000020.00000002.412705222.00000052E3A7B000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3A7B000
Size:	20480

Details

Name:	00000005.00000003.510307474.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000019.00000003.376467601.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	36864

Details

Name:	00000005.00000003.322081087.0000000005535000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5535000
Size:	12288

Details

Name:	00000005.00000003.318945866.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	24576

Details

Name:	00000004.00000002.334902872.000000000191E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	191E000
Size:	8192

Details

Name:	00000019.00000003.366309924.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	65536

Details

Name:	00000005.00000002.559703568.0000000005150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5150000
Size:	12288

Details

Name:	00000000.00000002.307689336.00000000074B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	74B1000
Size:	8192

Details

Name:	0000001E.00000002.409080636.00000000030D0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30D0000
Size:	4096

Details

Name:	0000001E.00000002.413995090.000000007FBD0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBD0000
Size:	4096

Details

Name:	00000011.00000000.364196203.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	00000005.00000003.509420021.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000005.00000003.337435961.0000000005638000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5638000
Size:	32768

Details

Name:	00000019.00000002.391422201.0000000003350000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000005.00000002.555142857.0000000000364000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	364000
Size:	4096

Details

Name:	0000001B.00000002.396703434.00000000010A8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8000
Size:	4096

Details

Name:	00000015.00000003.371568693.000001C86C10F000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C10F000
Size:	40960

Details

Name:	00000005.00000003.498663140.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.330058366.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000005.00000003.383944996.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	176128

Details

Name:	00000029.00000003.463903536.000002427496B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427496B000
Size:	32768

Details

Name:	00000029.00000002.494169387.000000F17BA7E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17BA7E000
Size:	8192

Details

Name:	0000001B.00000003.392629724.0000000000F1D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F1D000
Size:	8192

Details

Name:	00000014.00000003.369440296.0000000003A05000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A05000
Size:	8192

Details

Name:	0000001B.00000003.392718973.000000000103A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	103A000
Size:	32768

Details

Name:	0000001E.00000003.389793306.00000000015AE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE000
Size:	258048

Details

Name:	00000015.00000002.373166801.00007DF5BCCE0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCE0000
Size:	4096

Details

Name:	00000014.00000003.363269944.00000000039CA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39CA000
Size:	94208

Details

Name:	0000001B.00000003.379387678.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000003.321799857.0000000000E45000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E45000
Size:	94208

Details

Name:	00000027.00000002.450170408.00007FF530EC6000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530EC6000
Size:	16384

Details

Name:	00000000.00000003.300132754.0000000000E84000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E84000
Size:	65536

Details

Name:	0000001B.00000003.392734853.000000000104B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104B000
Size:	12288

Details

Name:	00000010.00000002.348245737.00000000014D0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14D0000
Size:	4096

Details

Name:	00000019.00000003.389870047.0000000005DB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DB0000
Size:	49152

Details

Name:	00000005.00000003.318754336.0000000005190000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5190000
Size:	8192

Details

Name:	00000004.00000003.325031335.0000000004D38000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D38000
Size:	49152

Details

Name:	00000015.00000002.374321275.00007FF5AEF1B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF1B000
Size:	4096

Details

Name:	0000001B.00000002.397420094.00000000FF8A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8A0000
Size:	20480

Details

Name:	00000029.00000003.470459913.0000024274975000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274975000
Size:	73728

Details

Name:	00000005.00000003.338510479.00000000066C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	66C0000
Size:	8192

Details

Name:	00000029.00000002.497345737.00007FF501EF7000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EF7000
Size:	8192

Details

Name:	00000004.00000000.305217151.0000000001131000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000005.00000003.337411443.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.338129098.0000000006410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6410000
Size:	16384

Details

Name:	00000025.00000002.427703570.00000016321FF000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16321FF000
Size:	4096

Details

Name:	0000001C.00000003.374358765.0000000002570000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2570000
Size:	65536

Details

Name:	0000000D.00000003.345467336.0000000005910000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	12288

Details

Name:	00000005.00000003.337839852.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	49152

Details

Name:	00000019.00000000.362945572.000000007FD52000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD52000
Size:	4096

Details

Name:	00000011.00000000.346496629.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000006.00000002.345872189.00007DF51A1C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1C0000
Size:	12288

Details

Name:	00000019.00000002.391804352.0000000004411000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4411000
Size:	28672

Details

Name:	00000015.00000003.371791124.000001C86C121000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C121000
Size:	36864

Details

Name:	00000029.00000003.462426824.00000242746C0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242746C0000
Size:	4096

Details

Name:	0000001E.00000003.388579896.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	65536

Details

Name:	00000000.00000002.306706508.0000000000DCF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DCF000
Size:	118784

Details

Name:	00000005.00000002.560388364.000000000610B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	610B000
Size:	20480

Details

Name:	0000001C.00000002.376008909.0000000000814000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	814000
Size:	24576

Details

Name:	00000000.00000002.306464880.0000000000CC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC6000
Size:	36864

Details

Name:	0000002A.00000000.461217945.00007DF543D30000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D30000
Size:	12288

Details

Name:	00000011.00000000.345722000.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000029.00000003.478769299.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	65536

Details

Name:	0000001E.00000002.409007536.00000000030BD000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30BD000
Size:	4096

Details

Name:	00000005.00000003.504743527.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000014.00000002.380566286.0000000003CE0000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3CE0000
Size:	8192

Details

Name:	00000000.00000002.307767956.000000007F030000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F030000
Size:	12288

Details

Name:	0000002D.00000002.557475636.00007FF579812000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579812000
Size:	12288

Details

Name:	0000001E.00000003.389210549.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.339349436.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	184320

Details

Name:	00000004.00000002.334640604.0000000001131000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000004.00000002.334860889.0000000001745000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1745000
Size:	16384

Details

Name:	00000005.00000003.384286489.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.330612816.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	0000000D.00000000.342721003.000000007FBB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	00000011.00000000.345625413.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	00000000.00000003.301120032.0000000000E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E42000
Size:	192512

Details

Name:	0000001B.00000003.393140674.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000005.00000003.318449927.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.387902931.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000002D.00000002.556912913.00007FF5790CE000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5790CE000
Size:	4096

Details

Name:	00000010.00000002.348016756.0000000000F96000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F96000
Size:	8192

Details

Name:	00000000.00000003.300162664.0000000000E3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3F000
Size:	204800

Details

Name:	00000005.00000003.337619206.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000000.370453326.0000000001131000.00000020.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	00000029.00000003.470313318.00000242749B6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749B6000
Size:	90112

Details

Name:	0000001E.00000002.408276028.00000000015AE000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15AE000
Size:	278528

Details

Name:	0000001E.00000003.389444820.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000015.00000002.372864678.000001C86A810000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A810000
Size:	4096

Details

Name:	0000000D.00000002.347092176.00000000058B0000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	58B0000
Size:	8192

Details

Name:	00000014.00000003.378043083.0000000003A5D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A5D000
Size:	8192

Details

Name:	00000005.00000002.560531137.000000000620D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	620D000
Size:	12288

Details

Name:	00000005.00000003.538372252.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000027.00000002.452501684.00007FF531119000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531119000
Size:	12288

Details

Name:	00000011.00000002.555887901.0000024B7D202000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	00000019.00000003.374278767.0000000005C50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C50000
Size:	24576

Details

Name:	00000005.00000002.556992041.0000000000FE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE0000
Size:	4096

Details

Name:	00000014.00000002.379623256.0000000001040000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1040000
Size:	4096

Details

Name:	00000005.00000003.318821291.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000029.00000002.496110333.00007FF501C05000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501C05000
Size:	8192

Details

Name:	00000005.00000003.316769168.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000005.00000003.320648525.0000000000E49000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E49000
Size:	40960

Details

Name:	00000029.00000003.475195781.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000006.00000002.346815858.00007FF50C460000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C460000
Size:	4096

Details

Name:	0000001C.00000000.372045253.0000000000152000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	152000
Size:	28672

Details

Name:	00000005.00000002.560304831.0000000005D4E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4E000
Size:	8192

Details

Name:	00000029.00000002.495053922.0000024274056000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274056000
Size:	4096

Details

Name:	00000019.00000003.377358310.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	49152

Details

Name:	0000001E.00000003.390759938.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	65536

Details

Name:	0000002D.00000002.557460842.00007FF5797BD000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5797BD000
Size:	8192

Details

Name:	00000020.00000002.414123358.00007FF4FDA93000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA93000
Size:	24576

Details

Name:	0000002D.00000002.556842775.00007FF5790A4000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5790A4000
Size:	4096

Details

Name:	00000014.00000003.378021204.000000000396B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396B000
Size:	12288

Details

Name:	0000002D.00000003.544946284.0000020819FFC000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20819FFC000
Size:	8192

Details

Name:	0000001B.00000002.397218122.00000000023CE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23CE000
Size:	8192

Details

Name:	00000004.00000003.330852042.0000000004D07000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D07000
Size:	24576

Details

Name:	00000010.00000002.348433916.00000000016E0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16E0000
Size:	36864

Details

Name:	00000025.00000002.427682287.00000016320F7000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16320F7000
Size:	36864

Details

Name:	00000005.00000003.498458271.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000025.00000000.415964093.00007DF51BC30000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC30000
Size:	4096

Details

Name:	0000001C.00000002.375578036.00000000006A0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	4096

Details

Name:	0000002A.00000002.473620981.00000270A8E60000.00000004.00000020.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	270A8E60000
Size:	40960

Details

Name:	00000010.00000003.346945756.0000000005540000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5540000
Size:	8192

Details

Name:	00000004.00000003.314672906.0000000004DBD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DBD000
Size:	4096

Details

Name:	00000004.00000003.311075720.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000019.00000003.372902393.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	53248

Details

Name:	00000019.00000003.374477267.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000015.00000002.374770163.00007FF5AEFD6000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFD6000
Size:	12288

Details

Name:	00000019.00000002.390569582.0000000000DFD000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DFD000
Size:	4096

Details

Name:	0000002D.00000002.557228671.00007FF57974F000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57974F000
Size:	12288

Details

Name:	00000029.00000002.494898467.0000024273FD0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273FD0000
Size:	8192

Details

Name:	00000004.00000003.315449181.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	00000000.00000002.306685356.0000000000DC9000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DC9000
Size:	20480

Details

Name:	00000011.00000002.556121993.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	0000001E.00000003.390558101.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	4096

Details

Name:	0000001E.00000003.390781561.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	36864

Details

Name:	0000002D.00000002.557435351.00007FF5797BA000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5797BA000
Size:	8192

Details

Name:	00000015.00000002.372676138.000001C86A2A3000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A2A3000
Size:	94208

Details

Name:	00000020.00000002.413429551.00007DF50B7C0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7C0000
Size:	12288

Details

Name:	00000011.00000002.555842913.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	00000029.00000003.464311757.00000242749A2000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A2000
Size:	143360

Details

Name:	00000014.00000002.380475732.00000000039B7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	39B7000
Size:	36864

Details

Name:	00000019.00000003.374932739.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	65536

Details

Name:	00000010.00000000.344743926.000000007FA30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA30000
Size:	4096

Details

Name:	00000004.00000003.314232532.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	0000001B.00000003.391803280.0000000001092000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1092000
Size:	49152

Details

Name:	00000020.00000000.400535758.00007DF50B7A2000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7A2000
Size:	4096

Details

Name:	00000010.00000002.347719934.0000000000D32000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D32000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000011.00000002.554904747.000000784EA7F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7F000
Size:	4096

Details

Name:	00000019.00000003.389908764.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000020.00000002.413275585.00000239ECD13000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECD13000
Size:	12288

Details

Name:	00000019.00000003.374242418.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000000.00000003.300799365.00000000073B2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73B2000
Size:	200704

Details

Name:	00000027.00000000.435765531.000001DB2EB70000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EB70000
Size:	102400

Details

Name:	0000001E.00000003.389247287.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000005.00000003.337808789.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	49152

Details

Name:	0000001E.00000003.391165909.0000000005BDD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BDD000
Size:	12288

Details

Name:	00000029.00000003.473549731.0000024274979000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274979000
Size:	16384

Details

Name:	00000005.00000003.416239294.0000000004B5E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5E000
Size:	4096

Details

Name:	0000002A.00000000.461169317.00007DF543D12000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D12000
Size:	4096

Details

Name:	00000005.00000003.337602380.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000A.00000000.336880468.00000000FFF40000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF40000
Size:	4096

Details

Name:	00000005.00000003.539243957.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000011.00000002.555734658.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	0000001E.00000002.409499636.0000000003100000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3100000
Size:	4096

Details

Name:	00000000.00000002.306381259.0000000000930000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	16384

Details

Name:	00000004.00000002.335185958.0000000004CD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD0000
Size:	4096

Details

Name:	0000001E.00000002.408990669.00000000030B4000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30B4000
Size:	4096

Details

Name:	00000027.00000002.450211141.00007FF530F2B000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F2B000
Size:	8192

Details

Name:	00000019.00000002.392227288.00000000059DF000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59DF000
Size:	4096

Details

Name:	00000006.00000002.346573164.00007FF50C3AC000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C3AC000
Size:	4096

Details

Name:	00000025.00000002.428227580.0000015A7FD13000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FD13000
Size:	20480

Details

Name:	0000001E.00000002.412641623.0000000005950000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5950000
Size:	65536

Details

Name:	0000001E.00000002.405707937.0000000000A1E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A1E000
Size:	4096

Details

Name:	00000000.00000002.306455808.0000000000CB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	36864

Details

Name:	00000004.00000002.335243575.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	00000027.00000002.449026329.000001DB2EC3C000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC3C000
Size:	53248

Details

Name:	0000002D.00000000.544353924.00007DF5874A0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874A0000
Size:	4096

Details

Name:	0000001E.00000003.387068887.0000000001590000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1590000
Size:	131072

Details

Name:	00000029.00000003.480534423.0000024274980000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274980000
Size:	57344

Details

Name:	00000005.00000003.384070965.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000002.306577304.0000000000D78000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D78000
Size:	8192

Details

Name:	0000001B.00000003.391407007.0000000001016000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1016000
Size:	585728

Details

Name:	0000002D.00000002.557074104.00007FF5795DA000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5795DA000
Size:	12288

Details

Name:	00000014.00000002.380353226.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	00000014.00000002.380027211.00000000013E0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E0000
Size:	12288

Details

Name:	00000006.00000002.346105544.00007FF50C2F1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C2F1000
Size:	12288

Details

Name:	00000029.00000002.496066540.00007FF501AE9000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501AE9000
Size:	4096

Details

Name:	00000014.00000003.359271451.0000000004831000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4831000
Size:	217088

Details

Name:	00000004.00000002.334806623.000000000164E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	164E000
Size:	8192

Details

Name:	00000005.00000003.321623882.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.318578569.0000000005150000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5150000
Size:	20480

Details

Name:	00000005.00000003.321765902.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	12288

Details

Name:	00000005.00000002.555112470.0000000000360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	360000
Size:	8192

Details

Name:	0000001E.00000002.411121104.0000000003260000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3260000
Size:	16384

Details

Name:	0000001E.00000003.389711383.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	49152

Details

Name:	00000020.00000002.412975134.00000239ECBE0000.00000004.00000020.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	239ECBE0000
Size:	8192

Details

Name:	00000005.00000003.441259687.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000005.00000002.560325788.0000000005E4E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4E000
Size:	8192

Details

Name:	0000001B.00000003.383323694.00000000010A5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A5000
Size:	4096

Details

Name:	00000005.00000002.557752351.0000000002A27000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A27000
Size:	32768

Details

Name:	00000025.00000002.427792935.0000015A7FA90000.00000004.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	15A7FA90000
Size:	4096

Details

Name:	00000005.00000003.337448119.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	32768

Details

Name:	00000005.00000003.384312871.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.376500186.0000000005C7A000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7A000
Size:	24576

Details

Name:	00000005.00000003.316968274.0000000000E14000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E14000
Size:	24576

Details

Name:	00000014.00000002.380068684.0000000001480000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1480000
Size:	4096

Details

Name:	0000001E.00000003.391057049.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001E.00000002.413919006.000000007FBC0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	4096

Details

Name:	00000029.00000003.469112348.0000024274998000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274998000
Size:	61440

Details

Name:	00000016.00000000.358306926.0000000001130000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000011.00000002.556458224.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	00000019.00000003.376328974.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000003.364964290.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000006.00000002.344517950.000000725A37F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	725A37F000
Size:	4096

Details

Name:	0000001C.00000002.377419059.000000007F270000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F270000
Size:	20480

Details

Name:	00000005.00000003.321284702.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	57344

Details

Name:	00000029.00000003.469392620.0000024274978000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274978000
Size:	4096

Details

Name:	00000005.00000003.535789852.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.473530345.0000024274971000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274971000
Size:	49152

Details

Name:	00000014.00000003.379167873.0000000003933000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3933000
Size:	8192

Details

Name:	00000004.00000002.335255708.0000000004D5A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5A000
Size:	8192

Details

Name:	00000011.00000000.363867802.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000005.00000003.332296618.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000000.305341443.00000000011DB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	00000014.00000002.379532842.0000000000A19000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A19000
Size:	4096

Details

Name:	00000005.00000003.502348271.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000015.00000000.354296793.00007DF5BCCE2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCE2000
Size:	4096

Details

Name:	00000005.00000003.498319173.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.469417242.0000024274975000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274975000
Size:	4096

Details

Name:	0000001C.00000002.376756817.0000000000AC0000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	AC0000
Size:	8192

Details

Name:	00000015.00000002.374041252.00007FF5AED42000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AED42000
Size:	4096

Details

Name:	00000014.00000003.379154501.0000000003918000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3918000
Size:	8192

Details

Name:	00000014.00000003.377798113.0000000003962000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3962000
Size:	16384

Details

Name:	0000001E.00000003.390189776.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	8192

Details

Name:	00000016.00000002.358551465.00000000007E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7E0000
Size:	16384

Details

Name:	0000001C.00000003.374477924.0000000002560000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2560000
Size:	65536

Details

Name:	00000015.00000000.354311124.00007DF5BCCF0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCF0000
Size:	12288

Details

Name:	00000005.00000003.320593789.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000029.00000003.475075800.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000019.00000003.370897170.0000000001621000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1621000
Size:	49152

Details

Name:	00000019.00000003.366405711.00000000059D0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59D0000
Size:	32768

Details

Name:	0000001B.00000003.392176218.000000000107B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	107B000
Size:	8192

Details

Name:	00000029.00000002.495847276.00007DF50FBE0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50FBE0000
Size:	4096

Details

Name:	00000029.00000003.462201480.000002427409F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427409F000
Size:	4096

Details

Name:	00000014.00000000.348899576.00000000FFAB0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAB0000
Size:	12288

Details

Name:	0000001E.00000003.387994973.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000029.00000002.495404473.0000024274108000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274108000
Size:	32768

Details

Name:	0000001E.00000003.389327449.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	4096

Details

Name:	00000005.00000003.384032311.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002A.00000002.474272845.00007FF53609A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53609A000
Size:	12288

Details

Name:	00000014.00000003.355944220.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000011.00000000.346440755.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	00000019.00000002.392273476.00000000059F0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59F0000
Size:	4096

Details

Name:	00000029.00000003.470599090.0000024274996000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274996000
Size:	36864

Details

Name:	00000000.00000002.307519389.0000000002F70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F70000
Size:	4096

Details

Name:	00000005.00000002.557047962.0000000000FE6000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FE6000
Size:	8192

Details

Name:	00000025.00000002.429157962.00007FF50DF13000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF13000
Size:	24576

Details

Name:	00000011.00000000.363952030.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	00000020.00000003.412527756.00000239ECC4B000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC4B000
Size:	8192

Details

Name:	00000014.00000000.348894211.00000000FFAA2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAA2000
Size:	4096

Details

Name:	0000001C.00000002.374949324.0000000000190000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	190000
Size:	102400

Details

Name:	00000005.00000003.426731104.0000000004B5D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5D000
Size:	8192

Details

Name:	00000011.00000000.364322504.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	00000025.00000002.428922928.00007FF50DE41000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DE41000
Size:	12288

Details

Name:	00000005.00000003.351154152.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	139264

Details

Name:	0000002A.00000002.474095684.00007FF535FC6000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FC6000
Size:	16384

Details

Name:	00000015.00000002.372775643.000001C86A440000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A440000
Size:	12288

Details

Name:	00000011.00000002.556098010.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	00000000.00000002.307628012.000000000510E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	510E000
Size:	8192

Details

Name:	00000029.00000003.469580336.0000024274987000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274987000
Size:	20480

Details

Name:	00000014.00000003.377210637.0000000003996000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3996000
Size:	16384

Details

Name:	00000027.00000003.447226471.000001DB2EC49000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC49000
Size:	8192

Details

Name:	00000011.00000002.555214637.0000024B7C870000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	00000027.00000002.447744586.000001DB2EBD0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DB2EBD0000
Size:	16384

Details

Name:	0000001C.00000002.377365396.000000000471E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	471E000
Size:	8192

Details

Name:	0000001E.00000003.404258961.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000014.00000002.379517876.0000000000A10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A10000
Size:	4096

Details

Name:	0000001B.00000002.396607910.0000000001095000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1095000
Size:	36864

Details

Name:	00000020.00000002.413300372.00000239ED0D0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ED0D0000
Size:	12288

Details

Name:	0000002A.00000002.474019049.00007FF5358A9000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5358A9000
Size:	8192

Details

Name:	00000005.00000003.318491660.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.345500118.0000024B7C890000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	00000005.00000002.560101219.0000000005420000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5420000
Size:	65536

Details

Name:	00000029.00000003.493841493.000002427404D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427404D000
Size:	8192

Details

Name:	00000014.00000003.376995518.000000000392C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392C000
Size:	40960

Details

Name:	00000019.00000003.369945957.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000029.00000002.496252826.00007FF501CC6000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501CC6000
Size:	4096

Details

Name:	00000004.00000003.314662987.0000000004FD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FD0000
Size:	65536

Details

Name:	0000001B.00000002.397345753.0000000003B24000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3B24000
Size:	8192

Details

Name:	00000019.00000003.364894722.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	49152

Details

Name:	00000004.00000003.331347802.0000000004D29000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D29000
Size:	8192

Details

Name:	0000001E.00000003.387165894.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	159744

Details

Name:	0000001C.00000002.375115675.00000000001EC000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EC000
Size:	16384

Details

Name:	00000015.00000003.371627663.000001C86C114000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C114000
Size:	20480

Details

Name:	00000011.00000002.556558344.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	0000001E.00000002.413026303.0000000005A50000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A50000
Size:	65536

Details

Name:	00000011.00000000.365089926.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	00000015.00000002.373030405.000001C86C109000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C109000
Size:	24576

Details

Name:	0000001E.00000003.403784834.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001B.00000003.393622124.0000000000FF7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF7000
Size:	12288

Details

Name:	00000005.00000003.536198071.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.555937657.0000000000DB0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DB0000
Size:	36864

Details

Name:	00000025.00000000.415917838.00007DF51BC20000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC20000
Size:	4096

Details

Name:	00000029.00000003.493823983.000002427404F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427404F000
Size:	12288

Details

Name:	00000004.00000003.329980614.0000000004D00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D00000
Size:	8192

Details

Name:	0000002D.00000002.556376202.000002081AC50000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081AC50000
Size:	45056

Details

Name:	00000019.00000000.362869881.0000000000BD0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	102400

Details

Name:	00000004.00000003.331402655.0000000004D55000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D55000
Size:	8192

Details

Name:	00000014.00000003.379303892.0000000003932000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3932000
Size:	4096

Details

Name:	00000029.00000002.496206539.00007FF501C8B000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501C8B000
Size:	8192

Details

Name:	0000000A.00000001.336907424.0000000001130000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000020.00000002.413645962.00007FF4FD910000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD910000
Size:	4096

Details

Name:	00000019.00000003.366450756.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000004.00000003.330905379.0000000004CDE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CDE000
Size:	8192

Details

Name:	00000005.00000003.425477597.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371745147.000001C86C116000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C116000
Size:	8192

Details

Name:	0000000D.00000002.345986387.0000000001064000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1064000
Size:	4096

Details

Name:	00000005.00000003.337712915.0000000006330000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6330000
Size:	12288

Details

Name:	00000020.00000002.413392007.00007DF50B7A2000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B7A2000
Size:	4096

Details

Name:	00000006.00000002.344780995.0000019BB17A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB17A0000
Size:	4096

Details

Name:	00000005.00000003.318634022.0000000005130000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5130000
Size:	49152

Details

Name:	0000001C.00000002.377207556.0000000002450000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2450000
Size:	4096

Details

Name:	0000002A.00000003.473016091.00000270A8EA3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8EA3000
Size:	4096

Details

Name:	00000015.00000002.372549673.000001C86A210000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A210000
Size:	16384

Details

Name:	00000000.00000002.307566345.000000000345E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	345E000
Size:	8192

Details

Name:	0000002D.00000002.557519361.00007FF579824000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579824000
Size:	20480

Details

Name:	0000001B.00000003.391923858.0000000001084000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1084000
Size:	57344

Details

Name:	0000001E.00000003.389004014.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	49152

Details

Name:	00000010.00000002.348227706.000000000148F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	148F000
Size:	4096

Details

Name:	0000000D.00000002.346609389.0000000001B80000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B80000
Size:	69632

Details

Name:	00000029.00000003.473193793.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	294912

Details

Name:	00000014.00000003.360226188.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	0000001E.00000003.387507026.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	159744

Details

Name:	00000025.00000002.428965926.00007FF50DEC9000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEC9000
Size:	8192

Details

Name:	00000005.00000003.320579891.00000000051E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E0000
Size:	8192

Details

Name:	00000005.00000003.329380638.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000005.00000002.560654941.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	53248

Details

Name:	00000019.00000002.392352098.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	4096

Details

Name:	00000000.00000002.306411050.00000000009D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D0000
Size:	8192

Details

Name:	00000006.00000002.344371791.0000007259B8E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7259B8E000
Size:	8192

Details

Name:	00000014.00000003.378131443.0000000003955000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3955000
Size:	53248

Details

Name:	00000005.00000003.553617621.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000002A.00000002.474287059.00007FF5360A1000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5360A1000
Size:	12288

Details

Name:	00000019.00000003.367112813.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.424984934.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.331356234.0000000004CD5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD5000
Size:	8192

Details

Name:	00000029.00000003.481986023.00000242749BB000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749BB000
Size:	61440

Details

Name:	0000000D.00000002.346809595.000000000313B000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	313B000
Size:	4096

Details

Name:	00000011.00000002.555912903.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000005.00000003.457462386.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	00000005.00000003.338307334.00000000065A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	65A0000
Size:	12288

Details

Name:	00000029.00000002.496094917.00007FF501B57000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501B57000
Size:	4096

Details

Name:	00000005.00000003.545249372.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000001B.00000003.379459131.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000014.00000003.358644020.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	00000019.00000003.366835945.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000006.00000002.346468887.00007FF50C34F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C34F000
Size:	8192

Details

Name:	00000014.00000003.356106625.00000000039E4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E4000
Size:	4096

Details

Name:	0000002D.00000002.557613140.00007FF579841000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579841000
Size:	16384

Details

Name:	00000027.00000002.451374958.00007FF530FC1000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530FC1000
Size:	12288

Details

Name:	00000025.00000002.427848937.0000015A7FAD0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FAD0000
Size:	12288

Details

Name:	00000029.00000003.493857782.000002427404C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427404C000
Size:	4096

Details

Name:	00000029.00000003.470624733.0000024274997000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274997000
Size:	32768

Details

Name:	0000001B.00000003.378564096.0000000000FF1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF1000
Size:	204800

Details

Name:	0000001C.00000002.376209268.000000000081D000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	81D000
Size:	8192

Details

Name:	00000005.00000003.462067591.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000000.00000002.307004990.00000000013A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13A0000
Size:	69632

Details

Name:	00000006.00000003.343509723.0000019BB1861000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1861000
Size:	90112

Details

Name:	00000005.00000003.316066678.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000005.00000003.317858934.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	16384

Details

Name:	00000029.00000003.480688543.000002427499D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499D000
Size:	28672

Details

Name:	00000011.00000000.345504642.0000024B7C970000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	0000001E.00000000.385041278.0000000000950000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	102400

Details

Name:	00000029.00000003.464115116.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	118784

Details

Name:	00000005.00000002.559227590.0000000004FEB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FEB000
Size:	32768

Details

Name:	0000001B.00000002.397051267.00000000011C2000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C2000
Size:	20480

Details

Name:	00000019.00000003.376296145.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000004.00000003.322865712.0000000004D5A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5A000
Size:	8192

Details

Name:	00000005.00000003.322270437.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.372823781.000001C86A490000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A490000
Size:	36864

Details

Name:	00000006.00000002.346489899.00007FF50C395000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C395000
Size:	20480

Details

Name:	0000001C.00000002.375502574.000000000065E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	65E000
Size:	8192

Details

Name:	0000001E.00000003.389748823.00000000015A3000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	0000001B.00000002.396156732.0000000000ECD000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ECD000
Size:	12288

Details

Name:	00000005.00000000.315362690.000000007F560000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F560000
Size:	4096

Details

Name:	00000005.00000003.324392061.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000002.379649647.0000000001100000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1100000
Size:	16384

Details

Name:	00000019.00000003.375999033.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	4096

Details

Name:	00000029.00000000.459679650.0000024273E50000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24273E50000
Size:	102400

Details

Name:	00000029.00000003.480100137.00000242749A9000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A9000
Size:	4096

Details

Name:	00000005.00000003.337565639.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	16384

Details

Name:	0000001E.00000002.412721906.0000000005970000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5970000
Size:	65536

Details

Name:	00000005.00000003.332328422.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371437719.000001C86C119000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C119000
Size:	20480

Details

Name:	00000029.00000003.483313889.0000024274979000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274979000
Size:	12288

Details

Name:	00000015.00000003.371991463.000001C86A2BA000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A2BA000
Size:	8192

Details

Name:	00000016.00000002.358531290.00000000007C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	102400

Details

Name:	00000000.00000002.306153135.00000000001F1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1F1000
Size:	200704

Details

Name:	00000029.00000002.495282141.00000242740C5000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740C5000
Size:	94208

Details

Name:	00000029.00000003.480467416.000002427497E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497E000
Size:	4096

Details

Name:	00000020.00000002.412938318.00000239ECBB0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECBB0000
Size:	12288

Details

Name:	00000005.00000003.498413555.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.385650670.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000025.00000002.429177012.00007FF50DF37000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF37000
Size:	8192

Details

Name:	00000005.00000003.330578533.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.426682210.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	172032

Details

Name:	00000005.00000003.426748811.0000000004B63000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B63000
Size:	8192

Details

Name:	00000015.00000002.374176376.00007FF5AEE23000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEE23000
Size:	4096

Details

Name:	00000000.00000003.305589592.0000000000E85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E85000
Size:	61440

Details

Name:	0000002D.00000002.556354369.000002081A8B0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2081A8B0000
Size:	4096

Details

Name:	00000014.00000003.377305278.000000000397A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	397A000
Size:	45056

Details

Name:	00000004.00000003.321292075.000000000418A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418A000
Size:	12288

Details

Name:	0000002D.00000002.557121095.00007FF579657000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579657000
Size:	4096

Details

Name:	00000010.00000002.348376930.00000000016A0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16A0000
Size:	65536

Details

Name:	00000014.00000002.379983964.0000000001380000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1380000
Size:	24576

Details

Name:	00000005.00000002.556963916.0000000000FDD000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FDD000
Size:	4096

Details

Name:	0000001C.00000001.372504360.0000000000150000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	4096

Details

Name:	0000001E.00000003.388135498.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.389818344.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.322815069.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.390160188.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	24576

Details

Name:	0000002A.00000003.473053723.00000270A8E98000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E98000
Size:	8192

Details

Name:	00000005.00000003.322794873.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	4096

Details

Name:	00000029.00000003.482252835.00000242749A2000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A2000
Size:	8192

Details

Name:	00000005.00000003.316439103.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000020.00000002.414245236.00007FF4FDB24000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB24000
Size:	20480

Details

Name:	0000001E.00000002.414021631.000000007FBD2000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBD2000
Size:	4096

Details

Name:	00000019.00000003.376367802.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000001B.00000003.393906855.0000000000FFB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB000
Size:	8192

Details

Name:	00000005.00000003.498271279.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.395395525.0000000000F1E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F1E000
Size:	4096

Details

Name:	00000005.00000003.338240096.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002D.00000002.556443365.000002081AE60000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081AE60000
Size:	65536

Details

Name:	0000001E.00000002.408205758.00000000015A3000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	0000001B.00000000.370547736.00000000011B2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	0000001C.00000002.377191923.0000000002400000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2400000
Size:	4096

Details

Name:	00000010.00000002.348167104.000000000129A000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	129A000
Size:	126976

Details

Name:	0000000D.00000002.346243490.00000000016FE000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16FE000
Size:	8192

Details

Name:	0000001E.00000003.387141654.00000000015A4000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A4000
Size:	20480

Details

Name:	00000019.00000002.391356196.000000000315E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	315E000
Size:	8192

Details

Name:	00000020.00000002.413250164.00000239ECD02000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECD02000
Size:	12288

Details

Name:	00000029.00000003.474851750.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	425984

Details

Name:	0000001B.00000002.395870725.00000000005F0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5F0000
Size:	16384

Details

Name:	00000004.00000000.305386213.00000000FF6C2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6C2000
Size:	4096

Details

Name:	00000014.00000002.380342369.0000000003914000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3914000
Size:	8192

Details

Name:	00000005.00000003.425442339.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000020.00000003.412542776.00000239ECC4A000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC4A000
Size:	4096

Details

Name:	00000025.00000002.428174841.0000015A7FD00000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FD00000
Size:	4096

Details

Name:	00000020.00000002.412959516.00000239ECBC0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECBC0000
Size:	4096

Details

Name:	00000005.00000003.337539447.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.347149814.000000007FBA0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	00000005.00000003.535947117.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.374856688.0000000005C60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C60000
Size:	65536

Details

Name:	00000004.00000002.334614933.000000000112E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	112E000
Size:	8192

Details

Name:	00000020.00000002.412906233.00000239ECB90000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECB90000
Size:	102400

Details

Name:	00000005.00000003.506142302.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000003.493739405.000002427405B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427405B000
Size:	81920

Details

Name:	0000001B.00000003.385772689.00000000010E3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10E3000
Size:	8192

Details

Name:	0000001E.00000003.388281041.0000000005A60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A60000
Size:	49152

Details

Name:	00000029.00000003.470339277.00000242749B6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749B6000
Size:	90112

Details

Name:	00000020.00000002.414154159.00007FF4FDAB7000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDAB7000
Size:	8192

Details

Name:	00000010.00000002.348270934.00000000014ED000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14ED000
Size:	4096

Details

Name:	00000005.00000003.439888544.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000011.00000000.363634648.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	16384

Details

Name:	00000019.00000003.373980184.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000003.364921035.000000000166C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166C000
Size:	24576

Details

Name:	0000001B.00000003.382293321.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000027.00000002.452426475.00007FF5310B7000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5310B7000
Size:	8192

Details

Name:	00000005.00000002.560707328.000000000644D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	644D000
Size:	12288

Details

Name:	00000029.00000003.476853956.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	176128

Details

Name:	00000011.00000002.556499215.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	00000019.00000003.375164408.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	65536

Details

Name:	00000011.00000000.364299192.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000014.00000002.380204454.0000000001577000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1577000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000002.347170615.000000007FBB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	00000010.00000000.344751799.000000007FA32000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA32000
Size:	4096

Details

Name:	00000000.00000002.307747202.000000007F020000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F020000
Size:	4096

Details

Name:	00000019.00000002.393593745.0000000005D60000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5D60000
Size:	28672

Details

Name:	0000001E.00000003.388362475.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	8192

Details

Name:	0000001E.00000003.389064174.00000000015AE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE000
Size:	278528

Details

Name:	0000001E.00000002.413888485.000000007FAC0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAC0000
Size:	20480

Details

Name:	00000019.00000003.374442313.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	16384

Details

Name:	0000001B.00000002.396102053.0000000000D3E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D3E000
Size:	8192

Details

Name:	00000005.00000003.457780164.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	00000000.00000003.305759038.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	8192

Details

Name:	00000010.00000002.347697923.0000000000D30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	4096

Details

Name:	0000001E.00000002.412839972.0000000005A0A000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A0A000
Size:	24576

Details

Name:	00000011.00000000.346582193.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	00000005.00000003.338025864.0000000000E71000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E71000
Size:	4096

Details

Name:	00000011.00000002.556644576.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	00000005.00000003.536568673.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.324421488.0000000004D5A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5A000
Size:	8192

Details

Name:	00000029.00000002.496889281.00007FF501E77000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E77000
Size:	4096

Details

Name:	0000001E.00000002.405848529.0000000000A2A000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A2A000
Size:	4096

Details

Name:	00000025.00000002.428002816.0000015A7FC4E000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A7FC4E000
Size:	12288

Details

Name:	0000002A.00000002.473757117.00000270A8E99000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E99000
Size:	4096

Details

Name:	00000014.00000003.375179533.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000004.00000000.305392258.00000000FF6D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6D0000
Size:	12288

Details

Name:	0000000A.00000000.336830806.00000000011C0000.00000008.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000005.00000003.383972470.0000000004B60000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	0000002A.00000000.461199452.00007DF543D22000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543D22000
Size:	4096

Details

Name:	00000011.00000000.345532599.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	00000006.00000002.345851557.00007DF51A1B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1B0000
Size:	4096

Details

Name:	00000019.00000003.364872711.000000000166F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166F000
Size:	12288

Details

Name:	0000001E.00000002.410952944.000000000324B000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	324B000
Size:	32768

Details

Name:	0000000D.00000002.346015800.0000000001300000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1300000
Size:	4096

Details

Name:	00000019.00000003.366030692.0000000001661000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1661000
Size:	53248

Details

Name:	00000000.00000002.307761801.000000007F022000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F022000
Size:	4096

Details

Name:	00000019.00000003.374571539.0000000001622000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1622000
Size:	36864

Details

Name:	00000025.00000000.415992188.00007DF51BC32000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC32000
Size:	4096

Details

Name:	00000005.00000003.321072887.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000002.395965676.00000000007F0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F0000
Size:	4096

Details

Name:	0000000D.00000002.346528638.000000000197F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	197F000
Size:	4096

Details

Name:	0000001E.00000003.388524893.00000000015AE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE000
Size:	221184

Details

Name:	00000000.00000000.289025787.00000000001F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	4096

Details

Name:	0000001B.00000003.393260868.0000000000FFD000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FFD000
Size:	4096

Details

Name:	00000005.00000002.559555275.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	57344

Details

Name:	00000011.00000000.363625948.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	00000020.00000002.413928495.00007FF4FDA63000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA63000
Size:	12288

Details

Name:	00000015.00000002.374159729.00007FF5AEDBE000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEDBE000
Size:	4096

Details

Name:	0000001E.00000003.389188005.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000000A.00000002.337189354.00000000FFF42000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF42000
Size:	4096

Details

Name:	00000005.00000003.337594121.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.338399180.00000000066C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	66C0000
Size:	12288

Details

Name:	00000014.00000003.359034982.00000000039C7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39C7000
Size:	65536

Details

Name:	00000004.00000002.334632678.0000000001130000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	0000000D.00000002.345964972.0000000001054000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	8192

Details

Name:	00000020.00000002.413581455.00007FF4FD7C5000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD7C5000
Size:	8192

Details

Name:	0000001E.00000003.386875141.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	94208

Details

Name:	00000005.00000002.556825165.0000000000FB0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB0000
Size:	8192

Details

Name:	00000005.00000003.535900419.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000002.409029343.00000000030C0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30C0000
Size:	40960

Details

Name:	0000002A.00000002.473497455.00000270A8DE0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A8DE0000
Size:	102400

Details

Name:	00000005.00000002.560553142.000000000630C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	630C000
Size:	16384

Details

Name:	00000014.00000003.378486291.0000000003929000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3929000
Size:	4096

Details

Name:	00000029.00000003.474803205.0000024274E6A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E6A000
Size:	425984

Details

Name:	00000011.00000002.556415904.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	00000019.00000002.392506758.0000000005C10000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5C10000
Size:	65536

Details

Name:	0000001B.00000003.395216431.0000000001012000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1012000
Size:	4096

Details

Name:	00000000.00000000.289086382.000000000022D000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	22D000
Size:	4096

Details

Name:	0000000A.00000000.336840925.00000000011DB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11DB000
Size:	159744

Details

Name:	00000005.00000003.342709791.000000000635D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635D000
Size:	8192

Details

Name:	0000001E.00000003.387187133.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000002.560286318.0000000005C4E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4E000
Size:	8192

Details

Name:	00000005.00000002.560345362.0000000005F4C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F4C000
Size:	16384

Details

Name:	0000001E.00000003.387019959.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	0000001B.00000003.392840614.0000000001009000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1009000
Size:	4096

Details

Name:	00000029.00000003.483299442.0000024274971000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274971000
Size:	4096

Details

Name:	00000029.00000002.496965411.00007FF501E8D000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E8D000
Size:	4096

Details

Name:	00000014.00000003.378642140.0000000003947000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3947000
Size:	20480

Details

Name:	00000005.00000003.321432266.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	8192

Details

Name:	00000005.00000003.437745714.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000005.00000003.317370494.0000000000E20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E20000
Size:	110592

Details

Name:	00000011.00000000.363877392.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	00000029.00000003.464447731.00000242749A2000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A2000
Size:	143360

Details

Name:	00000025.00000002.429359965.00007FF50DFBA000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFBA000
Size:	4096

Details

Name:	00000005.00000003.436573104.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000005.00000003.514214152.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000016.00000000.358381890.00000000011C0000.00000008.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000004.00000003.322366679.0000000004D35000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D35000
Size:	90112

Details

Name:	0000002A.00000002.473799234.00000270A9040000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	270A9040000
Size:	8192

Details

Name:	0000001E.00000003.388120810.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000019.00000003.367045638.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000027.00000002.449940523.00007DF53EDB2000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDB2000
Size:	4096

Details

Name:	0000002D.00000002.556636398.00007DF5874A0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874A0000
Size:	4096

Details

Name:	0000001E.00000003.390513846.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	8192

Details

Name:	0000001B.00000003.393288282.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000000.00000002.306237995.0000000000222000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	222000
Size:	45056

Details

Name:	0000001E.00000003.387460817.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	159744

Details

Name:	00000004.00000002.335135422.0000000004100000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4100000
Size:	8192

Details

Name:	00000005.00000003.317698371.0000000000E0E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	24576

Details

Name:	00000005.00000003.425399794.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.378707098.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000003.375325912.0000000006BC0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC0000
Size:	16384

Details

Name:	00000019.00000003.364542421.0000000001686000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1686000
Size:	8192

Details

Name:	00000005.00000003.536242100.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.376479431.000000000393C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	393C000
Size:	8192

Details

Name:	00000005.00000003.318705872.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000002.394293829.00000000067EE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67EE000
Size:	8192

Details

Name:	00000005.00000003.517357061.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	0000001C.00000002.376662339.00000000009F0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9F0000
Size:	65536

Details

Name:	00000029.00000003.474723323.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	212992

Details

Name:	00000000.00000003.300099555.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	4096

Details

Name:	00000005.00000003.318475112.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000002.396815056.0000000001130000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000005.00000003.318301745.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000002.390497243.0000000000BD0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	102400

Details

Name:	0000001E.00000003.403611343.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000020.00000002.413862522.00007FF4FDA53000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA53000
Size:	28672

Details

Name:	0000001B.00000002.396504335.000000000108D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	108D000
Size:	20480

Details

Name:	00000014.00000003.364719025.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000011.00000000.345485924.0000024B7C860000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	00000000.00000002.307728252.000000007F010000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F010000
Size:	4096

Details

Name:	00000014.00000002.380663008.00000000FFAA0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAA0000
Size:	4096

Details

Name:	00000004.00000003.313924198.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	0000001C.00000002.376766374.0000000000BCF000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BCF000
Size:	4096

Details

Name:	00000006.00000002.347150463.00007FF50C53A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C53A000
Size:	4096

Details

Name:	00000004.00000003.315472075.0000000004EE2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE2000
Size:	12288

Details

Name:	00000014.00000003.363264532.0000000003A05000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A05000
Size:	8192

Details

Name:	00000014.00000003.375337843.000000000393B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	393B000
Size:	466944

Details

Name:	0000000D.00000000.342628465.000000007FBA2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	00000006.00000002.345815085.00007DF418070000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF418070000
Size:	20480

Details

Name:	00000005.00000003.339207240.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000002.348649094.000000007FA42000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA42000
Size:	4096

Details

Name:	00000005.00000003.316423683.0000000000E27000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E27000
Size:	69632

Details

Name:	00000029.00000002.495327677.00000242740DD000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740DD000
Size:	8192

Details

Name:	00000014.00000002.379879461.00000000011C1000.00000008.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C1000
Size:	4096

Details

Name:	00000006.00000002.346071155.00007FF50C2C6000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C2C6000
Size:	16384

Details

Name:	00000014.00000003.362976082.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000005.00000003.339884517.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.386663606.00000000010E3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10E3000
Size:	8192

Details

Name:	00000004.00000002.334369476.0000000000DA0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DA0000
Size:	4096

Details

Name:	00000005.00000003.424937364.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000002.348577202.000000007F930000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F930000
Size:	20480

Details

Name:	00000005.00000003.510643345.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000014.00000003.377497286.000000000396F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396F000
Size:	28672

Details

Name:	00000029.00000003.470260282.000002427499F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499F000
Size:	53248

Details

Name:	00000005.00000003.425358966.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.329717536.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	00000029.00000003.467405545.0000024274987000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274987000
Size:	20480

Details

Name:	00000029.00000003.479950253.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	65536

Details

Name:	00000015.00000002.374447973.00007FF5AEF67000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF67000
Size:	4096

Details

Name:	0000001B.00000003.392921157.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000004.00000003.314318287.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	0000001B.00000003.393844158.000000000102A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	0000002A.00000002.474067672.00007FF535FBF000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FBF000
Size:	12288

Details

Name:	00000014.00000003.379314521.0000000003A5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A5E000
Size:	4096

Details

Name:	0000001E.00000003.387736189.0000000005A40000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	28672

Details

Name:	00000011.00000002.556312489.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	0000001E.00000002.408238500.00000000015A7000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15A7000
Size:	16384

Details

Name:	0000001B.00000003.382208107.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000025.00000002.429073983.00007FF50DEE7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DEE7000
Size:	16384

Details

Name:	00000006.00000000.331654707.00007FF50C541000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C541000
Size:	16384

Details

Name:	00000004.00000003.331503951.0000000004D70000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D70000
Size:	12288

Details

Name:	0000000D.00000002.345945099.0000000000FED000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FED000
Size:	12288

Details

Name:	00000004.00000003.310489952.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000029.00000003.465403514.0000024274971000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274971000
Size:	57344

Details

Name:	00000014.00000003.379271501.000000000397A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	397A000
Size:	45056

Details

Name:	0000001E.00000003.389895172.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	8192

Details

Name:	00000015.00000002.373158935.00007DF5BCCD2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BCCD2000
Size:	4096

Details

Name:	00000019.00000003.377169609.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	49152

Details

Name:	00000014.00000000.348869449.00000000FFA90000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFA90000
Size:	4096

Details

Name:	00000029.00000003.467471105.000002427497E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497E000
Size:	36864

Details

Name:	00000005.00000003.338052432.0000000006410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6410000
Size:	24576

Details

Name:	00000005.00000003.338356776.0000000006580000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6580000
Size:	4096

Details

Name:	00000005.00000003.425067495.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.555048206.00000000001C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C0000
Size:	16384

Details

Name:	00000029.00000003.464166250.000002427499D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499D000
Size:	73728

Details

Name:	00000015.00000003.355425487.000001C86C104000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C104000
Size:	16384

Details

Name:	00000027.00000002.447392625.000000CC54CAB000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC54CAB000
Size:	20480

Details

Name:	00000014.00000002.379661739.0000000001110000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1110000
Size:	4096

Details

Name:	00000004.00000003.330897685.0000000004CD9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD9000
Size:	12288

Details

Name:	00000027.00000002.450198079.00007FF530F10000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530F10000
Size:	4096

Details

Name:	00000020.00000002.414275525.00007FF4FDB31000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB31000
Size:	32768

Details

Name:	00000005.00000003.384784314.0000000004B64000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B64000
Size:	4096

Details

Name:	00000029.00000002.494913505.0000024274000000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274000000
Size:	73728

Details

Name:	00000014.00000003.377148254.0000000003977000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3977000
Size:	57344

Details

Name:	00000014.00000003.375649196.00000000039C0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39C0000
Size:	28672

Details

Name:	0000001E.00000003.388403439.0000000005B40000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B40000
Size:	32768

Details

Name:	0000002A.00000002.473477551.00000270A8DC0000.00000004.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	270A8DC0000
Size:	4096

Details

Name:	00000000.00000003.300622621.00000000073E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E3000
Size:	192512

Details

Name:	00000005.00000002.558204956.0000000002BDF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDF000
Size:	2990080

Details

Name:	00000010.00000003.347222673.00000000055D0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55D0000
Size:	16384

Details

Name:	00000011.00000002.555027730.0000024B7C840000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	00000029.00000003.473486783.000002427499C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499C000
Size:	32768

Details

Name:	00000005.00000003.319028700.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.331985669.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.375063750.00007FF5AF054000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF054000
Size:	20480

Details

Name:	00000025.00000002.428547776.00007FF50DAA7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DAA7000
Size:	32768

Details

Name:	00000010.00000000.344777302.000000007FA42000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA42000
Size:	4096

Details

Name:	00000005.00000003.318411412.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.318348448.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371732294.000001C86C110000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C110000
Size:	12288

Details

Name:	00000004.00000003.314099045.0000000004D89000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D89000
Size:	249856

Details

Name:	00000020.00000002.414203881.00007FF4FDB12000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB12000
Size:	12288

Details

Name:	00000004.00000003.313944214.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.375296789.0000000006BC0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC0000
Size:	57344

Details

Name:	00000014.00000001.348953015.0000000001130000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	0000001B.00000003.395052157.0000000000FF8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF8000
Size:	8192

Details

Name:	00000019.00000002.393956403.0000000005E7E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E7E000
Size:	8192

Details

Name:	0000001E.00000002.405972692.0000000000D00000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	D00000
Size:	4096

Details

Name:	00000005.00000003.542775088.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000019.00000002.391533387.00000000033B0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	65536

Details

Name:	0000002D.00000002.557420294.00007FF57979E000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57979E000
Size:	4096

Details

Name:	00000025.00000002.427717562.00000016322FF000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16322FF000
Size:	4096

Details

Name:	00000011.00000000.363260899.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	00000014.00000003.370144863.00000000039C7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39C7000
Size:	16384

Details

Name:	00000005.00000003.497961980.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.338801551.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.345902726.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000005.00000003.322104195.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	49152

Details

Name:	00000015.00000002.373087827.000001C86C124000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C124000
Size:	24576

Details

Name:	00000005.00000003.507277473.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000004.00000003.311270939.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000014.00000003.363234524.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000004.00000003.326046864.0000000004D38000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D38000
Size:	49152

Details

Name:	00000015.00000003.355411942.000001C86C12C000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C12C000
Size:	4096

Details

Name:	00000019.00000003.366890144.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000019.00000002.391366821.000000000325F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	325F000
Size:	4096

Details

Name:	00000005.00000003.536543633.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.392541909.000000000104B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104B000
Size:	12288

Details

Name:	0000000D.00000002.346043973.000000000139E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	139E000
Size:	8192

Details

Name:	0000001E.00000003.388295430.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000000.00000002.307650019.0000000007350000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7350000
Size:	4096

Details

Name:	00000019.00000002.390678440.0000000000F60000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F60000
Size:	4096

Details

Name:	0000001C.00000002.376309794.000000000084A000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	84A000
Size:	126976

Details

Name:	0000001B.00000003.392795950.0000000001033000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1033000
Size:	8192

Details

Name:	0000001B.00000003.391971383.0000000001065000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1065000
Size:	28672

Details

Name:	00000005.00000003.317019776.0000000000E1C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1C000
Size:	126976

Details

Name:	0000001B.00000002.397474924.00000000FF9C0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C0000
Size:	12288

Details

Name:	00000025.00000002.429212738.00007FF50DF3A000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DF3A000
Size:	8192

Details

Name:	00000005.00000003.384226576.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.355958133.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000001E.00000003.391318166.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	36864

Details

Name:	00000014.00000003.379055168.0000000003928000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3928000
Size:	4096

Details

Name:	0000000A.00000002.337000315.0000000000B60000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	102400

Details

Name:	0000001C.00000002.376858587.0000000000DD0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DD0000
Size:	69632

Details

Name:	00000005.00000003.477382272.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	00000005.00000003.511856869.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000005.00000003.424889403.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000016.00000002.358729370.00000000FF8A0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8A0000
Size:	4096

Details

Name:	00000014.00000002.380604199.0000000004830000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4830000
Size:	4096

Details

Name:	00000019.00000002.392262282.00000000059E3000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	59E3000
Size:	12288

Details

Name:	00000004.00000002.335322799.00000000FF6B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6B0000
Size:	4096

Details

Name:	00000029.00000002.497700179.00007FF501F6A000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F6A000
Size:	12288

Details

Name:	00000000.00000002.306258195.000000000022D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	22D000
Size:	16384

Details

Name:	00000010.00000002.348344775.0000000001640000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1640000
Size:	4096

Details

Name:	00000019.00000002.391441483.000000000337B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	337B000
Size:	32768

Details

Name:	00000000.00000003.301763338.0000000000E0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000020.00000002.414034676.00007FF4FDA6E000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA6E000
Size:	28672

Details

Name:	00000004.00000002.334917504.0000000001940000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1940000
Size:	32768

Details

Name:	0000001C.00000000.372156960.000000007F390000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000029.00000002.496708077.00007FF501E42000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E42000
Size:	4096

Details

Name:	00000019.00000002.391200173.0000000001840000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1840000
Size:	4096

Details

Name:	00000005.00000003.536149801.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.373355650.0000000005C20000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C20000
Size:	65536

Details

Name:	00000015.00000002.373361856.00007FF5AEAA2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEAA2000
Size:	4096

Details

Name:	00000005.00000002.559535288.00000000050D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50D0000
Size:	65536

Details

Name:	00000005.00000003.353602010.0000000006940000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6940000
Size:	12288

Details

Name:	0000001E.00000003.386685455.00000000054A1000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A1000
Size:	172032

Details

Name:	00000005.00000003.497889286.0000000004B5D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B5D000
Size:	4096

Details

Name:	00000029.00000003.466580729.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	8192

Details

Name:	00000005.00000003.357745240.000000000635F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	635F000
Size:	135168

Details

Name:	00000020.00000002.412894285.00000239ECB80000.00000004.00000040.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	239ECB80000
Size:	4096

Details

Name:	0000001B.00000003.392907182.0000000001000000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1000000
Size:	4096

Details

Name:	00000005.00000003.535869881.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.383386969.0000000004AE0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AE0000
Size:	65536

Details

Name:	00000016.00000002.358688173.00000000011C0000.00000008.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	00000014.00000000.348702961.00000000011C0000.00000008.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	11C0000
Size:	12288

Details

Name:	0000001E.00000002.413216383.0000000005BC0000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5BC0000
Size:	28672

Details

Name:	00000005.00000003.318883692.00000000051A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A0000
Size:	16384

Details

Name:	0000001E.00000003.389231185.0000000005B80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B80000
Size:	24576

Details

Name:	00000029.00000003.465353180.0000024274984000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274984000
Size:	24576

Details

Name:	0000001E.00000003.390695645.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000027.00000002.450179800.00007FF530EF1000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530EF1000
Size:	8192

Details

Name:	00000014.00000002.380685035.00000000FFAB0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFAB0000
Size:	12288

Details

Name:	00000005.00000003.339329846.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.346712028.00007FF50C44D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C44D000
Size:	4096

Details

Name:	00000005.00000003.316568844.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	0000000D.00000002.346056630.00000000013A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13A0000
Size:	4096

Details

Name:	00000004.00000002.334984263.0000000003F50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F50000
Size:	733184

Details

Name:	0000001E.00000002.413842842.000000000674E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	674E000
Size:	8192

Details

Name:	00000029.00000002.497652287.00007FF501F64000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501F64000
Size:	20480

Details

Name:	00000029.00000002.495811553.0000024274F00000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274F00000
Size:	8192

Details

Name:	00000005.00000002.554879132.0000000000160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	160000
Size:	102400

Details

Name:	00000014.00000002.379456451.00000000009D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	102400

Details

Name:	00000005.00000003.424844353.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000003.371648471.000001C86C11B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C11B000
Size:	12288

Details

Name:	00000016.00000002.358575417.0000000001130000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	00000019.00000003.376261394.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000004.00000003.316372828.0000000004DBD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DBD000
Size:	16384

Details

Name:	00000005.00000003.318249928.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.560188790.00000000055AE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55AE000
Size:	8192

Details

Name:	00000005.00000003.498537596.0000000004B32000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B32000
Size:	163840

Details

Name:	0000001E.00000003.390737104.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	16384

Details

Name:	0000001B.00000003.393160761.0000000001023000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1023000
Size:	12288

Details

Name:	0000002A.00000002.473569991.00000270A8E20000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E20000
Size:	4096

Details

Name:	00000015.00000002.374088261.00007FF5AED54000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AED54000
Size:	20480

Details

Name:	00000015.00000002.372563238.000001C86A220000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C86A220000
Size:	102400

Details

Name:	0000002A.00000002.474225767.00007FF53602D000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53602D000
Size:	8192

Details

Name:	00000019.00000003.366803945.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000006.00000002.346219154.00007FF50C30D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C30D000
Size:	4096

Details

Name:	00000029.00000003.474907321.0000024274F02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274F02000
Size:	425984

Details

Name:	0000001B.00000002.397372877.000000000431E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	431E000
Size:	8192

Details

Name:	0000002A.00000002.473606531.00000270A8E40000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E40000
Size:	8192

Details

Name:	00000006.00000002.345665648.0000019BB1900000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1900000
Size:	4096

Details

Name:	00000005.00000003.316817149.0000000000E19000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E19000
Size:	139264

Details

Name:	0000001E.00000003.388097690.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000015.00000002.373817297.00007FF5AEC2D000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEC2D000
Size:	4096

Details

Name:	0000001B.00000003.379755618.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000029.00000002.497195651.00007FF501EB7000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EB7000
Size:	49152

Details

Name:	00000025.00000002.427859456.0000015A7FAE0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FAE0000
Size:	4096

Details

Name:	00000005.00000002.560635785.000000000635D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	635D000
Size:	8192

Details

Name:	00000019.00000002.391453542.0000000003384000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3384000
Size:	8192

Details

Name:	00000011.00000000.364263765.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	00000029.00000003.493873450.000002427404B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427404B000
Size:	4096

Details

Name:	00000029.00000003.467051243.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	114688

Details

Name:	00000004.00000003.324769431.0000000004D2D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D2D000
Size:	32768

Details

Name:	0000001E.00000002.413937336.000000007FBC2000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC2000
Size:	4096

Details

Name:	00000004.00000002.335270083.0000000004D76000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D76000
Size:	36864

Details

Name:	00000006.00000002.346939791.00007FF50C477000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C477000
Size:	49152

Details

Name:	0000001C.00000002.375608949.00000000006B0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6B0000
Size:	16384

Details

Name:	00000019.00000002.392647160.0000000005C70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	4096

Details

Name:	00000006.00000002.346044692.00007FF50C1C5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C1C5000
Size:	8192

Details

Name:	00000011.00000000.346516681.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	0000001B.00000003.391986311.0000000001076000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1076000
Size:	16384

Details

Name:	00000004.00000003.331393304.000000000418C000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	418C000
Size:	4096

Details

Name:	0000000D.00000002.345974990.0000000001058000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1058000
Size:	4096

Details

Name:	00000014.00000003.378761001.0000000003947000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3947000
Size:	4096

Details

Name:	00000015.00000002.374494956.00007FF5AEF7D000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF7D000
Size:	4096

Details

Name:	0000001B.00000002.396088098.0000000000CFE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CFE000
Size:	8192

Details

Name:	0000001B.00000003.390977421.0000000001001000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1001000
Size:	671744

Details

Name:	0000001E.00000002.413096974.0000000005A90000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5A90000
Size:	8192

Details

Name:	0000001E.00000003.403628151.0000000005D80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	36864

Details

Name:	00000019.00000002.391119363.000000000181D000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	181D000
Size:	4096

Details

Name:	0000000A.00000000.336823077.00000000011B2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	00000005.00000003.438682746.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000005.00000003.339779596.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.344534386.0000019BB1760000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	19BB1760000
Size:	4096

Details

Name:	00000019.00000002.394661876.000000007FD52000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD52000
Size:	4096

Details

Name:	00000011.00000000.345441955.0000024B7C840000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	00000010.00000002.348622917.000000007FA40000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA40000
Size:	4096

Details

Name:	0000001B.00000003.391890287.000000000107A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	107A000
Size:	12288

Details

Name:	00000019.00000002.390589132.0000000000E3A000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E3A000
Size:	24576

Details

Name:	0000001B.00000003.382630847.00000000010A5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A5000
Size:	65536

Details

Name:	00000004.00000002.334099769.0000000000D90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D90000
Size:	16384

Details

Name:	00000014.00000003.356078160.00000000039E4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E4000
Size:	4096

Details

Name:	00000005.00000003.339320517.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002A.00000003.472750799.00000270A8E9B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E9B000
Size:	28672

Details

Name:	0000001B.00000003.395246811.0000000001054000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	8192

Details

Name:	00000010.00000000.344715784.0000000000D3A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D3A000
Size:	4096

Details

Name:	00000011.00000002.556668100.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	0000001E.00000002.406589749.0000000001540000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1540000
Size:	12288

Details

Name:	00000005.00000003.425165322.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.310476919.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.498601956.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000003.475875136.000002427497B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497B000
Size:	4096

Details

Name:	00000014.00000003.358821905.000000000484B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	484B000
Size:	331776

Details

Name:	0000001E.00000003.386778028.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000000.00000002.306476066.0000000000CD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CD6000
Size:	24576

Details

Name:	0000002D.00000002.556992137.00007FF5793E5000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5793E5000
Size:	4096

Details

Name:	00000029.00000002.494358058.000000F17C07E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17C07E000
Size:	8192

Details

Name:	00000000.00000003.289757436.0000000000E3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3E000
Size:	4096

Details

Name:	0000000D.00000002.347183606.000000007FBB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	00000019.00000002.391477808.000000000338D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	338D000
Size:	4096

Details

Name:	00000005.00000003.319759142.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000010.00000000.344695656.0000000000D30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	4096

Details

Name:	00000000.00000002.306312056.00000000008C0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	8C0000
Size:	4096

Details

Name:	00000010.00000000.344705805.0000000000D32000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D32000
Size:	28672

Details

Name:	00000014.00000002.380546062.0000000003A5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3A5E000
Size:	4096

Details

Name:	00000006.00000002.345695758.0000019BB1908000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1908000
Size:	24576

Details

Name:	0000001E.00000003.387715081.0000000005A30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A30000
Size:	24576

Details

Name:	00000005.00000003.317941635.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	20480

Details

Name:	00000000.00000003.305960896.0000000000DCE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DCE000
Size:	122880

Details

Name:	0000001B.00000003.382571989.00000000047A1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47A1000
Size:	372736

Details

Name:	00000005.00000003.536641379.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000002.334545103.0000000000E4A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E4A000
Size:	4096

Details

Name:	00000029.00000002.495491797.0000024274660000.00000008.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	24274660000
Size:	266240

Details

Name:	00000005.00000003.335836220.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.374585428.000000000164B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	164B000
Size:	53248

Details

Name:	0000002D.00000002.556812890.00007FF57909D000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57909D000
Size:	16384

Details

Name:	00000005.00000003.424921508.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002A.00000002.473668597.00000270A8E6B000.00000004.00000020.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	270A8E6B000
Size:	24576

Details

Name:	0000002D.00000002.556557442.000002081AE90000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081AE90000
Size:	4096

Details

Name:	00000006.00000002.345930145.00007FF50BD91000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50BD91000
Size:	16384

Details

Name:	00000014.00000003.378596035.0000000003946000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3946000
Size:	24576

Details

Name:	00000019.00000003.375947213.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	12288

Details

Name:	00000011.00000000.345991761.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	0000001B.00000003.391738197.000000000101E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101E000
Size:	12288

Details

Name:	0000001B.00000002.396316397.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000029.00000003.467201171.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	4096

Details

Name:	0000001C.00000002.377498015.000000007F372000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000006.00000002.346981208.00007FF50C493000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C493000
Size:	24576

Details

Name:	00000020.00000002.414079979.00007FF4FDA77000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA77000
Size:	49152

Details

Name:	00000006.00000002.345795406.0000019BB1E50000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1E50000
Size:	4096

Details

Name:	00000019.00000002.392543344.0000000005C50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C50000
Size:	36864

Details

Name:	00000005.00000003.325739041.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000015.00000002.373230491.00007FF595C52000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C52000
Size:	4096

Details

Name:	00000029.00000002.495033012.0000024274050000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274050000
Size:	8192

Details

Name:	0000001B.00000002.397160134.00000000013D0000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13D0000
Size:	24576

Details

Name:	0000000D.00000003.345496652.00000000058F0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58F0000
Size:	65536

Details

Name:	0000001B.00000003.392114682.000000000105A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	105A000
Size:	45056

Details

Name:	00000010.00000002.348001076.0000000000DE0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DE0000
Size:	4096

Details

Name:	0000001B.00000003.392226263.000000000104E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104E000
Size:	32768

Details

Name:	00000004.00000002.334826571.00000000016A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16A0000
Size:	4096

Details

Name:	00000005.00000003.317913501.00000000050F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50F0000
Size:	28672

Details

Name:	00000029.00000002.496677989.00007FF501E31000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E31000
Size:	24576

Details

Name:	00000005.00000003.384163109.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.378526526.000000000396B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396B000
Size:	12288

Details

Name:	0000002A.00000002.474110473.00007FF535FD0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FD0000
Size:	4096

Details

Name:	00000014.00000003.378413671.0000000003953000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3953000
Size:	8192

Details

Name:	00000004.00000003.331410202.0000000004D5A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D5A000
Size:	8192

Details

Name:	00000004.00000003.330931859.0000000004CD7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD7000
Size:	8192

Details

Name:	00000005.00000003.325319316.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	24576

Details

Name:	00000004.00000002.335335215.00000000FF6C2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF6C2000
Size:	4096

Details

Name:	00000005.00000003.331679236.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000002.559435394.0000000005020000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5020000
Size:	65536

Details

Name:	00000000.00000003.305583907.0000000000E82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E82000
Size:	8192

Details

Name:	00000019.00000002.390837043.000000000156E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	156E000
Size:	8192

Details

Name:	0000002D.00000002.557390588.00007FF579792000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579792000
Size:	28672

Details

Name:	00000019.00000002.391328620.0000000001CF0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CF0000
Size:	4096

Details

Name:	00000006.00000002.345581818.0000019BB1866000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1866000
Size:	69632

Details

Name:	00000000.00000003.300253219.0000000000E0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	16384

Details

Name:	0000001E.00000003.388504270.00000000015A3000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	0000001E.00000003.387347472.00000000015BD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BD000
Size:	159744

Details

Name:	00000014.00000003.377359570.0000000003997000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3997000
Size:	12288

Details

Name:	00000014.00000003.358932837.0000000003A60000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A60000
Size:	430080

Details

Name:	00000011.00000000.363045395.0000024B7C890000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	0000002D.00000002.555112648.00000079191FF000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	79191FF000
Size:	4096

Details

Name:	00000005.00000003.385042410.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	176128

Details

Name:	0000001B.00000003.391544919.000000000101B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101B000
Size:	565248

Details

Name:	00000005.00000003.535837588.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000002.347127808.00007FF50C531000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C531000
Size:	32768

Details

Name:	00000019.00000003.366298155.00000000059F0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F0000
Size:	28672

Details

Name:	0000001B.00000002.396175405.0000000000F00000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F00000
Size:	12288

Details

Name:	00000000.00000003.301373342.0000000000E84000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E84000
Size:	65536

Details

Name:	00000005.00000003.337756939.000000000631D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	631D000
Size:	12288

Details

Name:	00000010.00000002.348362609.0000000001690000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1690000
Size:	8192

Details

Name:	00000019.00000003.369977591.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000006.00000003.343430039.0000019BB1877000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1877000
Size:	36864

Details

Name:	00000004.00000003.322071694.0000000004D73000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D73000
Size:	49152

Details

Name:	00000019.00000002.390958056.0000000001603000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1603000
Size:	184320

Details

Name:	00000000.00000002.306976372.000000000119E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	8192

Details

Name:	0000001E.00000003.403569201.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000004.00000003.330618089.0000000004CE0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE0000
Size:	4096

Details

Name:	0000001B.00000003.394196885.0000000001011000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1011000
Size:	16384

Details

Name:	00000029.00000003.478749417.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	77824

Details

Name:	0000001E.00000003.388191558.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000029.00000002.497068752.00007FF501EA3000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501EA3000
Size:	12288

Details

Name:	0000001E.00000002.405479475.00000000009AA000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9AA000
Size:	24576

Details

Name:	0000001E.00000003.388800120.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	65536

Details

Name:	00000011.00000000.363651675.0000024B7D202000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	0000002D.00000002.554962289.0000007918FFE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7918FFE000
Size:	8192

Details

Name:	0000001C.00000002.377648143.000000007F390000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000004.00000003.311240715.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000005.00000003.498100757.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.496745585.00007FF501E5E000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E5E000
Size:	4096

Details

Name:	00000005.00000003.552314627.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000015.00000002.374987101.00007FF5AF042000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AF042000
Size:	12288

Details

Name:	0000001E.00000003.388080714.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000020.00000002.413759413.00007FF4FD9C5000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9C5000
Size:	4096

Details

Name:	0000001E.00000003.390927229.00000000015A3000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A3000
Size:	12288

Details

Name:	00000005.00000003.384267986.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000027.00000002.447445892.000000CC54DAE000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC54DAE000
Size:	8192

Details

Name:	0000000A.00000002.337179818.00000000FFF32000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF32000
Size:	4096

Details

Name:	00000027.00000002.452450104.00007FF5310BD000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5310BD000
Size:	8192

Details

Name:	00000000.00000002.307158477.0000000002EB0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	733184

Details

Name:	0000002D.00000002.557580141.00007FF579835000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579835000
Size:	16384

Details

Name:	0000001B.00000003.385377832.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000005.00000003.316894029.0000000000E0E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	45056

Details

Name:	0000001C.00000002.375840250.00000000007CF000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CF000
Size:	4096

Details

Name:	00000000.00000000.289124213.000000007F010000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F010000
Size:	4096

Details

Name:	00000004.00000003.311153217.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000004.00000003.331370612.0000000004CDF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CDF000
Size:	4096

Details

Name:	00000025.00000002.428531520.00007FF50DAA1000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DAA1000
Size:	20480

Details

Name:	0000002D.00000002.557149335.00007FF5796AC000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5796AC000
Size:	16384

Details

Name:	00000029.00000003.467119978.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	57344

Details

Name:	0000001B.00000002.396133461.0000000000D70000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D70000
Size:	24576

Details

Name:	0000001C.00000002.374905937.000000000015A000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A000
Size:	4096

Details

Name:	00000014.00000003.379223166.0000000003926000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3926000
Size:	4096

Details

Name:	00000005.00000003.322040776.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000011.00000000.346469579.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	00000000.00000002.306588085.0000000000D7B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D7B000
Size:	16384

Details

Name:	0000001B.00000003.393215158.0000000001028000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1028000
Size:	16384

Details

Name:	00000005.00000003.320058536.00000000051C1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C1000
Size:	57344

Details

Name:	0000001B.00000002.396027104.00000000007FF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FF000
Size:	4096

Details

Name:	0000001B.00000002.397243759.00000000039E0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	39E0000
Size:	733184

Details

Name:	00000000.00000002.306549581.0000000000D3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D3E000
Size:	8192

Details

Name:	0000002D.00000002.556717180.00007DF5874C0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874C0000
Size:	12288

Details

Name:	00000005.00000002.561259428.000000007F570000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F570000
Size:	4096

Details

Name:	00000005.00000003.498643034.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.392272484.0000000001046000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1046000
Size:	32768

Details

Name:	0000001E.00000003.403354309.0000000005BD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	28672

Details

Name:	00000005.00000003.337508527.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	28672

Details

Name:	00000029.00000002.494856343.0000024273EA0000.00000004.00000020.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24273EA0000
Size:	12288

Details

Name:	00000014.00000002.380636741.00000000FFA90000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFA90000
Size:	4096

Details

Name:	0000001C.00000002.377528777.000000007F380000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	00000000.00000003.305546430.0000000000E3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3F000
Size:	196608

Details

Name:	0000001E.00000003.388693448.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000006.00000002.344612670.0000019BB1770000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1770000
Size:	102400

Details

Name:	0000001C.00000002.377450021.000000007F370000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000029.00000003.481409429.00000242749CA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749CA000
Size:	61440

Details

Name:	00000004.00000002.334574296.0000000000E56000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E56000
Size:	4096

Details

Name:	0000001E.00000002.412614300.000000000549D000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	549D000
Size:	12288

Details

Name:	00000006.00000003.343803890.0000019BB185B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB185B000
Size:	24576

Details

Name:	00000027.00000002.447578744.000000CC5547E000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC5547E000
Size:	8192

Details

Name:	00000014.00000000.348561956.00000000009D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	102400

Details

Name:	0000001E.00000002.412772926.0000000005980000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5980000
Size:	4096

Details

Name:	00000006.00000002.347061636.00007FF50C512000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C512000
Size:	12288

Details

Name:	00000000.00000003.301627369.0000000000E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0C000
Size:	4096

Details

Name:	00000005.00000003.440830010.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	0000001B.00000002.396361905.000000000102A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	0000002D.00000002.556030742.000002081A01F000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2081A01F000
Size:	4096

Details

Name:	00000005.00000003.539564449.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000029.00000003.474982710.0000024274954000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274954000
Size:	40960

Details

Name:	00000019.00000003.375397297.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	12288

Details

Name:	00000005.00000003.435284592.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000027.00000002.450150766.00007FF530C27000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530C27000
Size:	32768

Details

Name:	00000011.00000002.556397312.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000011.00000000.363039850.0000024B7C870000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	0000001E.00000003.387256814.00000000015A0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A0000
Size:	8192

Details

Name:	00000029.00000003.475211376.0000024274992000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274992000
Size:	77824

Details

Name:	00000029.00000003.479988416.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	20480

Details

Name:	00000005.00000003.317850093.00000000050E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E0000
Size:	28672

Details

Name:	00000005.00000003.536127792.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000A.00000002.337184121.00000000FFF40000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF40000
Size:	4096

Details

Name:	00000010.00000002.348522918.0000000004041000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4041000
Size:	8192

Details

Name:	00000015.00000003.371759433.000001C86C103000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C103000
Size:	8192

Details

Name:	00000014.00000003.358660406.0000000003B10000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	65536

Details

Name:	0000002A.00000002.473927837.00007DF441BE0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF441BE0000
Size:	20480

Details

Name:	00000005.00000003.318654704.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000003.390602768.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	45056

Details

Name:	00000005.00000003.540504403.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000020.00000002.413595121.00007FF4FD7CA000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD7CA000
Size:	4096

Details

Name:	0000001E.00000002.406532536.0000000001530000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1530000
Size:	16384

Details

Name:	00000011.00000000.362791374.000000784EB7B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	0000002A.00000003.472502670.00000270A8E71000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E71000
Size:	122880

Details

Name:	00000005.00000003.425421451.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.499202570.0000000006370000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6370000
Size:	36864

Details

Name:	00000011.00000000.345602301.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	00000011.00000002.555298320.0000024B7C890000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	0000001B.00000003.392683691.0000000001035000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1035000
Size:	53248

Details

Name:	00000000.00000001.289215990.00000000001F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	4096

Details

Name:	00000005.00000002.556925014.0000000000FD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FD0000
Size:	40960

Details

Name:	00000014.00000002.380326542.0000000003910000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3910000
Size:	4096

Details

Name:	00000014.00000003.378470564.000000000396B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	396B000
Size:	12288

Details

Name:	0000001C.00000002.375968134.0000000000810000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	810000
Size:	8192

Details

Name:	00000015.00000003.371699836.000001C86C116000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C116000
Size:	8192

Details

Name:	00000005.00000003.317010586.0000000000E19000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E19000
Size:	4096

Details

Name:	00000006.00000002.345993151.00007FF50C027000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C027000
Size:	32768

Details

Name:	00000014.00000000.348583614.0000000001130000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	4096

Details

Name:	0000001B.00000003.395123766.0000000001006000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1006000
Size:	4096

Details

Name:	00000025.00000002.428451814.00007DF51BC32000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC32000
Size:	4096

Details

Name:	00000005.00000003.536757460.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000014.00000000.348589329.0000000001131000.00000020.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	0000002A.00000002.474235768.00007FF536082000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF536082000
Size:	12288

Details

Name:	00000027.00000003.447173304.000001DB2EC78000.00000004.00000001.sdmp
TargetID:	39
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB2EC78000
Size:	32768

Details

Name:	00000005.00000002.559413244.0000000005011000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5011000
Size:	49152

Details

Name:	00000005.00000003.516408135.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000005.00000003.337902052.0000000006318000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6318000
Size:	32768

Details

Name:	00000005.00000003.320025897.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	0000001E.00000002.411644481.0000000003290000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3290000
Size:	20480

Details

Name:	00000005.00000003.338563972.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.318281247.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000006.00000000.331476031.00007DF51A1A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A1A0000
Size:	4096

Details

Name:	00000005.00000003.322010481.000000000543D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	543D000
Size:	12288

Details

Name:	0000001E.00000002.409546899.000000000322C000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	322C000
Size:	16384

Details

Name:	00000000.00000002.306270813.0000000000234000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	234000
Size:	16384

Details

Name:	0000000D.00000002.346816828.0000000003150000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3150000
Size:	4096

Details

Name:	00000011.00000002.555763166.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000004.00000003.330576096.0000000004D15000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D15000
Size:	53248

Details

Name:	0000002D.00000002.555185601.0000020819F10000.00000004.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20819F10000
Size:	4096

Details

Name:	00000019.00000003.364941288.0000000005852000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5852000
Size:	176128

Details

Name:	0000001B.00000003.392855219.000000000100E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	32768

Details

Name:	00000027.00000002.449960282.00007DF53EDC0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDC0000
Size:	12288

Details

Name:	00000005.00000003.316415285.0000000000E67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E67000
Size:	12288

Details

Name:	00000000.00000000.289104946.00000000008D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8D0000
Size:	102400

Details

Name:	00000014.00000003.356141091.00000000039E4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E4000
Size:	4096

Details

Name:	0000000D.00000000.342582415.0000000000F90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	F90000
Size:	102400

Details

Name:	00000025.00000002.429385324.00007FF50DFC1000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DFC1000
Size:	16384

Details

Name:	0000001E.00000003.386719635.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000015.00000002.374840673.00007FF5AEFED000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEFED000
Size:	8192

Details

Name:	00000004.00000003.322204189.0000000004D4C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D4C000
Size:	53248

Details

Name:	00000000.00000002.306958810.000000000109E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	109E000
Size:	8192

Details

Name:	0000001B.00000003.394064716.0000000001008000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1008000
Size:	4096

Details

Name:	00000005.00000002.555240757.0000000000500000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	500000
Size:	4096

Details

Name:	00000015.00000003.371719171.000001C86C12A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86C12A000
Size:	16384

Details

Name:	0000001E.00000002.413740980.0000000005DB0000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5DB0000
Size:	8192

Details

Name:	00000005.00000002.559799430.0000000005183000.00000040.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5183000
Size:	4096

Details

Name:	0000001B.00000002.397149774.0000000001390000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1390000
Size:	4096

Details

Name:	00000029.00000003.476056819.0000024274983000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274983000
Size:	4096

Details

Name:	00000029.00000003.470497267.0000024274E02000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E02000
Size:	94208

Details

Name:	00000006.00000002.346829199.00007FF50C463000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C463000
Size:	12288

Details

Name:	00000000.00000002.307145108.0000000002E30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E30000
Size:	4096

Details

Name:	00000025.00000002.428620388.00007FF50DC45000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DC45000
Size:	8192

Details

Name:	00000005.00000002.560784383.0000000006570000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	6570000
Size:	20480

Details

Name:	00000014.00000003.356179146.00000000039E3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	39E3000
Size:	8192

Details

Name:	00000011.00000000.363598063.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	00000015.00000002.372768454.000001C86A33C000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A33C000
Size:	8192

Details

Name:	00000019.00000003.364681447.000000000166F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166F000
Size:	20480

Details

Name:	00000004.00000003.316386050.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	00000004.00000002.335298449.0000000004E05000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E05000
Size:	4096

Details

Name:	00000005.00000003.317176807.0000000000E3B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E3B000
Size:	4096

Details

Name:	00000019.00000002.393729052.0000000005DEE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DEE000
Size:	8192

Details

Name:	00000014.00000002.379552806.0000000000A1C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A1C000
Size:	4096

Details

Name:	00000004.00000003.314524630.0000000004DC5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DC5000
Size:	4096

Details

Name:	0000001B.00000002.396007231.00000000007FC000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7FC000
Size:	4096

Details

Name:	0000001E.00000002.405291945.0000000000950000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	102400

Details

Name:	00000005.00000003.325627986.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.318392018.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000025.00000002.428462097.00007DF51BC40000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC40000
Size:	12288

Details

Name:	00000010.00000002.347984031.0000000000DD0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DD0000
Size:	16384

Details

Name:	0000001E.00000003.390713958.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000014.00000003.375190985.0000000003A06000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3A06000
Size:	4096

Details

Name:	00000000.00000002.306898802.0000000000EA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA0000
Size:	12288

Details

Name:	00000000.00000002.307633311.000000000520C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	520C000
Size:	16384

Details

Name:	00000005.00000002.559499874.00000000050BA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50BA000
Size:	24576

Details

Name:	0000001E.00000002.405785925.0000000000A27000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A27000
Size:	4096

Details

Name:	00000005.00000003.434561678.000000000636A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	636A000
Size:	4096

Details

Name:	00000005.00000003.337877261.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	20480

Details

Name:	00000011.00000002.556373869.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	00000004.00000002.334973944.0000000002940000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2940000
Size:	36864

Details

Name:	0000001E.00000003.388708394.0000000005A90000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	45056

Details

Name:	00000020.00000002.413904844.00007FF4FDA60000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA60000
Size:	4096

Details

Name:	00000029.00000002.496579629.00007FF501DEC000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501DEC000
Size:	4096

Details

Name:	00000019.00000003.370499028.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000029.00000003.467419025.000002427498D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427498D000
Size:	4096

Details

Name:	00000004.00000003.315454953.0000000004EA3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA3000
Size:	192512

Details

Name:	00000011.00000002.556627203.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000005.00000003.536500845.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000014.00000003.376715439.0000000003994000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3994000
Size:	24576

Details

Name:	00000005.00000002.560174790.000000000556E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	556E000
Size:	8192

Details

Name:	00000011.00000000.345590554.0000024B7CA36000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA36000
Size:	24576

Details

Name:	00000014.00000002.379686172.0000000001131000.00000020.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	0000001B.00000003.393368991.000000000102A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102A000
Size:	8192

Details

Name:	0000001E.00000002.409109805.00000000030D6000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30D6000
Size:	8192

Details

Name:	00000011.00000002.555166417.0000024B7C860000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	00000005.00000003.338157420.0000000006410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6410000
Size:	32768

Details

Name:	0000001E.00000003.387384215.0000000001599000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1599000
Size:	20480

Details

Name:	00000029.00000003.479889738.00000242749BD000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749BD000
Size:	73728

Details

Name:	00000029.00000002.496191740.00007FF501C79000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501C79000
Size:	4096

Details

Name:	00000005.00000003.425292580.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001B.00000003.386679575.00000000010A5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A5000
Size:	16384

Details

Name:	00000005.00000003.425007800.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000029.00000002.495743389.0000024274986000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274986000
Size:	32768

Details

Name:	00000019.00000003.364459080.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	0000001C.00000002.376432121.0000000000873000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	873000
Size:	86016

Details

Name:	00000005.00000003.321919560.0000000005400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	8192

Details

Name:	00000029.00000003.469374469.0000024274976000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274976000
Size:	4096

Details

Name:	0000001E.00000003.390807455.0000000005BAA000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BAA000
Size:	24576

Details

Name:	0000001B.00000003.394478488.0000000001011000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1011000
Size:	16384

Details

Name:	00000005.00000002.555980802.0000000000DBA000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DBA000
Size:	176128

Details

Name:	0000001B.00000002.397454640.00000000FF9B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9B0000
Size:	4096

Details

Name:	00000005.00000002.557519174.0000000001420000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1420000
Size:	368640

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000015.00000003.371832596.000001C86A33F000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C86A33F000
Size:	8192

Details

Name:	00000011.00000000.364567973.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	0000001E.00000002.408099792.0000000001582000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1582000
Size:	131072

Details

Name:	00000004.00000003.331139152.0000000004CD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD1000
Size:	24576

Details

Name:	00000010.00000002.347824745.0000000000D70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D70000
Size:	102400

Details

Name:	00000005.00000003.338648517.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000005.00000003.535972110.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000000D.00000002.346479776.000000000182D000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	182D000
Size:	8192

Details

Name:	00000005.00000003.537039435.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000010.00000000.344797135.000000007FA50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA50000
Size:	12288

Details

Name:	00000029.00000003.493808414.0000024274053000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274053000
Size:	4096

Details

Name:	00000027.00000002.452415065.00007FF53109E000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53109E000
Size:	4096

Details

Name:	00000029.00000003.475179413.000002427497A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497A000
Size:	4096

Details

Name:	00000005.00000003.337488616.0000000005636000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5636000
Size:	12288

Details

Name:	0000001B.00000003.378749556.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000025.00000002.427779148.0000015A00260000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A00260000
Size:	4096

Details

Name:	00000019.00000003.375286319.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	20480

Details

Name:	0000002D.00000002.557175676.00007FF579746000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF579746000
Size:	4096

Details

Name:	00000020.00000002.413074505.00000239ECC29000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	239ECC29000
Size:	73728

Details

Name:	00000019.00000002.393911854.0000000005E3E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E3E000
Size:	8192

Details

Name:	00000011.00000000.345872664.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	00000005.00000003.340377206.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000002.413775785.0000000006350000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6350000
Size:	8192

Details

Name:	0000001E.00000003.388492849.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	49152

Details

Name:	00000004.00000003.320766632.0000000004CE1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE1000
Size:	90112

Details

Name:	0000002D.00000002.555539563.0000020819FA0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20819FA0000
Size:	16384

Details

Name:	00000014.00000002.380503574.00000000039CA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	39CA000
Size:	4096

Details

Name:	00000005.00000003.498294207.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000001E.00000002.405545887.00000000009C0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9C0000
Size:	4096

Details

Name:	00000004.00000003.322168892.0000000004D6D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D6D000
Size:	24576

Details

Name:	0000001B.00000002.396039883.000000000083A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	83A000
Size:	24576

Details

Name:	00000011.00000000.364788819.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	0000001C.00000002.377342395.0000000003621000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3621000
Size:	8192

Details

Name:	00000005.00000003.330500906.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	8192

Details

Name:	0000000D.00000002.347027947.0000000003391000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3391000
Size:	40960

Details

Name:	00000019.00000003.389748907.0000000005DB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DB0000
Size:	28672

Details

Name:	0000001E.00000003.389164659.0000000005B60000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	45056

Details

Name:	00000005.00000002.560912826.000000000683D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	683D000
Size:	12288

Details

Name:	00000005.00000002.561043095.0000000006A7D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A7D000
Size:	12288

Details

Name:	00000019.00000003.377617264.0000000005D70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	36864

Details

Name:	00000005.00000003.518709221.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000004.00000003.330988260.0000000004CFA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CFA000
Size:	8192

Details

Name:	00000027.00000000.435924854.00007FF531141000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531141000
Size:	16384

Details

Name:	0000001B.00000003.379688703.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000000.315395400.000000007F580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	12288

Details

Name:	00000019.00000003.374199954.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	49152

Details

Name:	00000005.00000003.316994407.0000000000E1C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1C000
Size:	126976

Details

Name:	00000014.00000002.379585317.000000000102F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	102F000
Size:	69632

Details

Name:	00000014.00000003.360316068.0000000004A30000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A30000
Size:	65536

Details

Name:	00000005.00000002.557074512.0000000000FEA000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FEA000
Size:	8192

Details

Name:	00000015.00000002.372494147.00000086CC0FB000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CC0FB000
Size:	20480

Details

Name:	0000001E.00000003.390345237.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	28672

Details

Name:	0000001E.00000002.409513638.000000000314E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	8192

Details

Name:	0000002A.00000002.474082118.00007FF535FC3000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535FC3000
Size:	8192

Details

Name:	00000005.00000003.319535840.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	4096

Details

Name:	00000000.00000002.307106007.0000000002E24000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E24000
Size:	12288

Details

Name:	00000019.00000002.393514330.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	12288

Details

Name:	00000006.00000002.345775960.0000019BB1CD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1CD0000
Size:	12288

Details

Name:	00000014.00000003.379064790.000000000392E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392E000
Size:	8192

Details

Name:	0000001E.00000002.413155914.0000000005B80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B80000
Size:	36864

Details

Name:	00000019.00000003.376342935.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000002.560817306.00000000066BF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	66BF000
Size:	4096

Details

Name:	00000005.00000002.560074324.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	57344

Details

Name:	00000005.00000002.559335251.0000000004FFD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FFD000
Size:	4096

Details

Name:	00000016.00000000.358417898.00000000FF8A2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8A2000
Size:	4096

Details

Name:	0000001B.00000002.396412185.000000000105A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	105A000
Size:	45056

Details

Name:	00000005.00000003.437110177.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	00000025.00000000.416007778.00007DF51BC40000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC40000
Size:	12288

Details

Name:	00000005.00000003.316328072.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000019.00000003.374022360.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	16384

Details

Name:	00000005.00000003.325987595.0000000005530000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	12288

Details

Name:	00000025.00000002.427736848.0000015A00000000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A00000000
Size:	12288

Details

Name:	0000001B.00000003.394918584.0000000001014000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1014000
Size:	4096

Details

Name:	00000005.00000003.337555757.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	65536

Details

Name:	00000005.00000003.424805441.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	172032

Details

Name:	0000001E.00000003.390460129.0000000005BB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	8192

Details

Name:	00000014.00000003.378899621.0000000003942000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3942000
Size:	4096

Details

Name:	0000002A.00000002.474256146.00007FF536094000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF536094000
Size:	20480

Details

Name:	00000004.00000002.335282835.0000000004D86000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D86000
Size:	8192

Details

Name:	0000001B.00000003.379615707.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	0000001B.00000002.396480605.000000000107B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	107B000
Size:	8192

Details

Name:	00000005.00000003.338465212.000000000430F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	430F000
Size:	163840

Details

Name:	00000016.00000000.358411090.00000000FF8A0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF8A0000
Size:	4096

Details

Name:	00000029.00000003.471457225.000002427497C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497C000
Size:	32768

Details

Name:	0000001B.00000002.396727528.00000000010E4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10E4000
Size:	4096

Details

Name:	00000011.00000000.363815851.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000015.00000002.372603037.000001C86A270000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C86A270000
Size:	28672

Details

Name:	0000001B.00000002.397385390.000000000471E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	471E000
Size:	8192

Details

Name:	0000001E.00000003.390902287.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	8192

Details

Name:	00000019.00000002.391519440.00000000033A1000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33A1000
Size:	49152

Details

Name:	00000005.00000003.337268682.0000000005640000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5640000
Size:	28672

Details

Name:	00000029.00000003.469291442.0000024274E20000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274E20000
Size:	122880

Details

Name:	00000005.00000003.337894015.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	28672

Details

Name:	0000001C.00000002.377388527.0000000004B50000.00000040.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	4B50000
Size:	4096

Details

Name:	00000005.00000003.340510012.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000015.00000002.372459423.00000086CBDFE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBDFE000
Size:	8192

Details

Name:	00000025.00000002.428293797.00007DF419AF0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF419AF0000
Size:	20480

Details

Name:	00000011.00000000.346098187.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000005.00000003.508501596.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000003.479911964.00000242749AB000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749AB000
Size:	225280

Details

Name:	00000005.00000003.339971989.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.364866926.000000000166C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	166C000
Size:	8192

Details

Name:	0000000A.00000002.337174880.00000000FFF30000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF30000
Size:	4096

Details

Name:	00000029.00000002.495144533.0000024274070000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274070000
Size:	86016

Details

Name:	0000001E.00000002.408671493.00000000017CE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CE000
Size:	8192

Details

Name:	00000011.00000000.363082775.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	00000004.00000003.320808879.0000000004CE9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE9000
Size:	8192

Details

Name:	00000005.00000003.337298190.0000000005630000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	65536

Details

Name:	00000004.00000003.322321452.0000000004D52000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D52000
Size:	28672

Details

Name:	0000001E.00000002.412825963.0000000005A05000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A05000
Size:	12288

Details

Name:	00000015.00000002.374288550.00007FF5AEF0B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AEF0B000
Size:	8192

Details

Name:	00000005.00000003.425314593.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.310449733.0000000004DD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD0000
Size:	65536

Details

Name:	00000029.00000002.496820003.00007FF501E6E000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501E6E000
Size:	8192

Details

Name:	00000014.00000003.378788461.0000000003935000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3935000
Size:	4096

Details

Name:	00000005.00000003.521686204.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000004.00000003.314122399.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	430080

Details

Name:	00000005.00000003.324245526.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000011.00000000.363068786.0000024B7C990000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	00000004.00000003.313984010.0000000004DD1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD1000
Size:	786432

Details

Name:	0000001E.00000002.413174063.0000000005BA0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	4096

Details

Name:	0000001E.00000002.411698137.000000000339E000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	339E000
Size:	8192

Details

Name:	00000029.00000003.469550835.000002427499C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499C000
Size:	4096

Details

Name:	0000001B.00000003.382381128.0000000004721000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4721000
Size:	217088

Details

Name:	00000006.00000002.347039455.00007FF50C4BA000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C4BA000
Size:	8192

Details

Name:	00000006.00000002.345712464.0000019BB1913000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB1913000
Size:	12288

Details

Name:	00000029.00000002.494486506.000000F17C47C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F17C47C000
Size:	16384

Details

Name:	00000014.00000002.379948914.000000000131E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131E000
Size:	8192

Details

Name:	00000027.00000000.435830690.00007DF53EDB0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDB0000
Size:	4096

Details

Name:	00000019.00000003.372724522.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	65536

Details

Name:	00000005.00000003.318424223.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000004.00000003.331176288.000000000418E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	418E000
Size:	4096

Details

Name:	00000027.00000000.435844389.00007DF53EDB2000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53EDB2000
Size:	4096

Details

Name:	00000005.00000003.549509878.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	0000001B.00000002.396756968.00000000010F0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10F0000
Size:	8192

Details

Name:	0000001E.00000003.388773426.0000000005B50000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B50000
Size:	65536

Details

Name:	0000001C.00000003.374333988.0000000002580000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2580000
Size:	12288

Details

Name:	00000029.00000003.464407730.000002427495A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427495A000
Size:	143360

Details

Name:	0000001E.00000003.387243355.0000000001596000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1596000
Size:	28672

Details

Name:	0000002A.00000003.473151574.00000270A8EA3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8EA3000
Size:	4096

Details

Name:	00000000.00000002.307709040.000000007EF10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EF10000
Size:	20480

Details

Name:	00000029.00000003.464209370.000002427497E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427497E000
Size:	143360

Details

Name:	00000029.00000002.495393373.0000024274102000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274102000
Size:	16384

Details

Name:	00000029.00000003.471262577.000002427498A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427498A000
Size:	16384

Details

Name:	0000001C.00000002.377223565.000000000255E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	255E000
Size:	8192

Details

Name:	00000020.00000002.412745206.00000052E3B7E000.00000004.00000001.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52E3B7E000
Size:	8192

Details

Name:	00000020.00000002.414311549.00007FF4FDB41000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB41000
Size:	16384

Details

Name:	00000004.00000002.334722803.00000000011B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	0000001E.00000000.385309747.000000007FBE0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBE0000
Size:	12288

Details

Name:	0000000D.00000003.345527838.00000000058E4000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E4000
Size:	45056

Details

Name:	00000005.00000003.500446604.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000006.00000002.345769281.0000019BB1AD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19BB1AD0000
Size:	4096

Details

Name:	00000014.00000003.379189652.000000000394A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	394A000
Size:	8192

Details

Name:	00000011.00000000.364340136.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	0000002A.00000002.473356000.00000084E26FA000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E26FA000
Size:	24576

Details

Name:	00000005.00000003.322314934.0000000005531000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5531000
Size:	53248

Details

Name:	00000014.00000003.378663208.0000000003948000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3948000
Size:	16384

Details

Name:	00000019.00000003.370266579.0000000005BD1000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD1000
Size:	61440

Details

Name:	00000005.00000003.536317076.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.366269957.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.543858205.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000029.00000003.482353860.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	8192

Details

Name:	00000004.00000003.330872646.0000000004D04000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D04000
Size:	12288

Details

Name:	00000005.00000003.316011553.0000000004B60000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000029.00000003.465332992.0000024274973000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274973000
Size:	53248

Details

Name:	00000029.00000003.473469700.0000024274995000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274995000
Size:	4096

Details

Name:	00000005.00000003.320983874.00000000051C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000019.00000003.364565815.000000000167E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	167E000
Size:	8192

Details

Name:	0000002A.00000002.473719618.00000270A8E87000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	270A8E87000
Size:	32768

Details

Name:	00000025.00000002.428656522.00007FF50DD90000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50DD90000
Size:	4096

Details

Name:	00000000.00000002.306534137.0000000000CFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CFA000
Size:	24576

Details

Name:	0000001E.00000002.411531377.000000000326C000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	326C000
Size:	16384

Details

Name:	00000025.00000002.427885000.0000015A7FBE0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15A7FBE0000
Size:	16384

Details

Name:	0000001E.00000002.409140503.00000000030DA000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30DA000
Size:	4096

Details

Name:	00000019.00000002.391222593.0000000001847000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1847000
Size:	4096

Details

Name:	00000029.00000002.495219550.00000242740AA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	242740AA000
Size:	28672

Details

Name:	00000004.00000003.331364538.0000000004CD8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD8000
Size:	4096

Details

Name:	00000014.00000002.379502214.0000000000A0C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A0C000
Size:	8192

Details

Name:	00000019.00000003.374415546.0000000005C30000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C30000
Size:	24576

Details

Name:	00000005.00000003.338918963.00000000066C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	66C0000
Size:	32768

Details

Name:	00000014.00000003.379233437.000000000392E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	392E000
Size:	8192

Details

Name:	00000029.00000003.480029488.00000242749BD000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749BD000
Size:	151552

Details

Name:	0000001B.00000003.391862212.000000000106C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	106C000
Size:	69632

Details

Name:	0000001B.00000003.379776294.0000000004720000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	65536

Details

Name:	00000005.00000002.557716214.0000000002988000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2988000
Size:	8192

Details

Name:	0000002D.00000003.544899308.0000020819FFC000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20819FFC000
Size:	8192

Details

Name:	00000016.00000000.358315229.0000000001131000.00000020.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Details

Name:	0000001E.00000003.387486792.0000000001598000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1598000
Size:	49152

Details

Name:	0000000D.00000003.345515693.00000000058E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	12288

Details

Name:	00000005.00000003.537818150.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000014.00000003.379080982.0000000003931000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3931000
Size:	16384

Details

Name:	0000000A.00000000.336875936.00000000FFF32000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FFF32000
Size:	4096

Details

Name:	0000001E.00000002.409268594.00000000030EB000.00000040.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30EB000
Size:	4096

Details

Name:	00000020.00000002.412990921.00000239ECBF0000.00000002.00020000.sdmp
TargetID:	32
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239ECBF0000
Size:	16384

Details

Name:	00000005.00000003.464031477.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	126976

Details

Name:	00000005.00000003.337659626.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	0000002D.00000002.556529691.000002081AE80000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2081AE80000
Size:	4096

Details

Name:	00000029.00000003.481074309.00000242749A8000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A8000
Size:	16384

Details

Name:	0000001E.00000003.387105883.00000000015DF000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF000
Size:	8192

Details

Name:	0000001E.00000002.409165365.00000000030E0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30E0000
Size:	4096

Details

Name:	00000000.00000002.306393363.0000000000940000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	940000
Size:	8192

Details

Name:	00000005.00000002.557685786.0000000002970000.00000040.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2970000
Size:	4096

Details

Name:	0000001C.00000002.376251724.000000000083B000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	83B000
Size:	4096

Details

Name:	00000005.00000003.318196267.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	00000010.00000002.348254504.00000000014E3000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14E3000
Size:	4096

Details

Name:	00000019.00000003.375967170.0000000005D50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	8192

Details

Name:	0000002A.00000002.473402092.00000084E2A7D000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84E2A7D000
Size:	12288

Details

Name:	00000015.00000002.372482660.00000086CBFFF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86CBFFF000
Size:	4096

Details

Name:	0000001B.00000000.370972552.00000000FF9B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9B0000
Size:	4096

Details

Name:	00000029.00000003.473079446.00000242749A6000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749A6000
Size:	147456

Details

Name:	0000002D.00000000.544365794.00007DF5874A2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5874A2000
Size:	4096

Details

Name:	00000010.00000002.348323265.000000000151B000.00000040.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	151B000
Size:	4096

Details

Name:	0000001E.00000003.387961563.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000010.00000002.348331161.0000000001530000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1530000
Size:	8192

Details

Name:	00000029.00000002.496473861.00007FF501D6B000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF501D6B000
Size:	8192

Details

Name:	00000005.00000003.544507627.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	118784

Details

Name:	00000014.00000002.380255957.000000000216E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	216E000
Size:	8192

Details

Name:	00000029.00000003.480754056.000002427499C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2427499C000
Size:	4096

Details

Name:	00000005.00000003.499167426.0000000006379000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6379000
Size:	122880

Details

Name:	00000029.00000003.462447358.00000242746C0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242746C0000
Size:	4096

Details

Name:	00000004.00000003.327718033.0000000004D22000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D22000
Size:	16384

Details

Name:	0000001E.00000003.387114949.0000000001524000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	4096

Details

Name:	00000005.00000003.536596741.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000000.00000002.306472360.0000000000CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CD0000
Size:	8192

Details

Name:	00000027.00000002.452357239.00007FF53106E000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53106E000
Size:	28672

Details

Name:	00000004.00000002.335223488.0000000004CE6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4CE6000
Size:	4096

Details

Name:	0000002D.00000002.557048207.00007FF5793FD000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5793FD000
Size:	8192

Details

Name:	00000019.00000002.392084989.00000000059C0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59C0000
Size:	65536

Details

Name:	0000001E.00000003.387272095.0000000001590000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1590000
Size:	24576

Details

Name:	00000005.00000003.316474845.0000000000BB4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BB4000
Size:	4096

Details

Name:	0000000D.00000002.347197930.000000007FBC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	00000011.00000002.555951497.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000005.00000002.559035376.0000000003A39000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3A39000
Size:	4096

Details

Name:	0000001B.00000002.396204541.0000000000F15000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F15000
Size:	12288

Details

Name:	00000029.00000003.473301490.00000242749CA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	242749CA000
Size:	147456

Details

Name:	00000029.00000002.496013682.00007FF5018FC000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5018FC000
Size:	4096

Details

Name:	00000027.00000002.452343523.00007FF531067000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531067000
Size:	16384

Details

Name:	00000029.00000003.467309426.0000024274978000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274978000
Size:	4096

Details

Name:	00000005.00000003.498249433.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000016.00000002.358677674.00000000011B2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B2000
Size:	57344

Details

Name:	00000004.00000003.330047549.0000000004D03000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D03000
Size:	126976

Details

Name:	00000029.00000002.495777043.0000024274994000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274994000
Size:	20480

Details

Name:	0000001B.00000003.386672182.00000000010C1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10C1000
Size:	8192

Details

Name:	00000006.00000002.345557156.0000019BB185F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19BB185F000
Size:	8192

Details

Name:	0000002D.00000002.557357898.00007FF57978B000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57978B000
Size:	12288

Details

Name:	00000029.00000003.478727648.0000024274984000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24274984000
Size:	4096

Details

Name:	00000005.00000003.337925796.0000000006310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6310000
Size:	4096

Details

Name:	00000011.00000000.364141309.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	00000005.00000003.442234680.0000000006377000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6377000
Size:	122880

Details

Name:	0000002D.00000002.554917673.0000007918EFD000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7918EFD000
Size:	12288

Details

Name:	00000029.00000002.494939394.0000024274013000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24274013000
Size:	86016

Details

Name:	0000000D.00000002.346036331.0000000001355000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1355000
Size:	8192

Details

Name:	0000001E.00000003.389653600.00000000015EE000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15EE000
Size:	20480

Details

Name:	00000019.00000003.370004384.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000005.00000003.536619422.0000000004B31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B31000
Size:	4096

Details

Name:	00000019.00000003.370764660.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	8192

Details

Name:	00000005.00000003.373507283.0000000006360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6360000
Size:	135168

Details

Name:	00000019.00000003.369443706.0000000005851000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5851000
Size:	4096

Details

Name:	00000025.00000002.428361019.00007DF51BC30000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51BC30000
Size:	4096

Details

Name:	00000005.00000003.458902175.0000000006369000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6369000
Size:	122880

Details

Name:	0000000A.00000002.337051796.0000000001131000.00000020.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1131000
Size:	528384

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

Domains

IPs

Registry

Memdumps