Automated Malware Analysis IOC Report for

Details

Name:	00000004.00000003.350179976.000000000449A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	449A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.350063292.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411798480.0000000003E28000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E28000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.412888978.0000000003E28000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E28000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.394776495.0000000004C6A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C6A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352276623.00000000044CE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	44CE000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.394077058.0000000003EA4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA4000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411892507.0000000003E5C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5C000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411513032.0000000003D56000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D56000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.395083059.0000000004C36000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C36000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.414829262.0000000003D56000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D56000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411602320.0000000003DBF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DBF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352230581.00000000044CE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	44CE000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.392253067.0000000004CD4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD4000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352180992.0000000004466000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4466000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.412949182.00000000005A6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A6000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391366953.0000000004C36000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C36000
Size:	643072

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.414560875.0000000003DF3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF3000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352056687.000000000449A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	449A000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001F.00000002.439114989.0000000000752000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	752000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411158873.0000000003D56000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D56000
Size:	643072

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.413709722.0000000003DBF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DBF000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.351507345.0000000004503000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4503000
Size:	233472

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000006.00000002.576672734.0000000002EE1000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EE1000
Size:	540672

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000014.00000003.391774753.0000000004C36000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C36000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411727538.0000000003DF4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF4000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391477356.0000000004C9F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C9F000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.414304073.0000000003D8A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D8A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.392467054.0000000004D08000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D08000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.350312058.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.350502878.0000000004503000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4503000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.350212865.0000000003748000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3748000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.395194489.0000000004C01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C01000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000006.00000002.581022172.00000000060B0000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	60B0000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Installs a raw input device (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
Yara signature match	System Summary

Details

Name:	00000019.00000002.418519690.0000000003471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3471000
Size:	548864

Signature Hits	Behavior Group	Mitre Attack
Detected Nanocore Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000006.00000002.579331613.0000000003F29000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F29000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391514426.0000000004C01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C01000
Size:	647168

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000006.00000002.573655036.0000000000B02000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	B02000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391714719.0000000004C6A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C6A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001F.00000002.440127421.0000000003E89000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E89000
Size:	540672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352384580.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.350252312.0000000004466000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4466000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.394033269.0000000004D08000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D08000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411291828.0000000003DBF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DBF000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000019.00000002.418761309.0000000004479000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4479000
Size:	540672

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391833117.0000000004C9F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C9F000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411683482.0000000003DF4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF4000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.391948004.0000000004CD4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD4000
Size:	212992

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411424843.0000000003D8A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D8A000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000019.00000002.415517736.0000000000BC2000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	BC2000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000004.00000003.352498016.0000000003748000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3748000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.411346377.0000000003D21000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D21000
Size:	647168

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.394535307.0000000004C9F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C9F000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.392573341.0000000004D3C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D3C000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000014.00000003.394945613.0000000004CD3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CD3000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001F.00000002.440034174.0000000002E81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E81000
Size:	548864

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	0000001B.00000003.415163976.0000000003D21000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D21000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected Nanocore RAT	AV Detection, E-Banking Fraud, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000028.00000002.508094635.00007DF571B02000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B02000
Size:	4096

Details

Name:	0000001B.00000003.425410995.0000000000559000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	559000
Size:	77824

Details

Name:	00000004.00000003.357620339.0000000003717000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3717000
Size:	8192

Details

Name:	0000001F.00000003.414892198.00000000011CB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CB000
Size:	12288

Details

Name:	00000004.00000003.358123001.00000000036D4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36D4000
Size:	4096

Details

Name:	00000028.00000002.507602504.000002AC2D2CD000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2CD000
Size:	28672

Details

Name:	00000028.00000003.494119907.000002AC2DB8E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8E000
Size:	8192

Details

Name:	0000000F.00000002.371071967.00000000051B0000.00000040.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	51B0000
Size:	4096

Details

Name:	00000012.00000002.574398013.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	00000028.00000003.480969152.000002AC2DB7E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7E000
Size:	4096

Details

Name:	0000000F.00000002.370856736.000000000103E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	103E000
Size:	8192

Details

Name:	00000014.00000002.403721493.0000000000FC7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FC7000
Size:	4096

Details

Name:	0000000D.00000002.366708500.00000000003F1000.00000020.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000014.00000003.402037529.0000000003E12000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E12000
Size:	8192

Details

Name:	00000006.00000002.579502056.0000000004EE8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE8000
Size:	8192

Details

Name:	00000028.00000003.491892852.000002AC2DB8E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8E000
Size:	4096

Details

Name:	0000001B.00000003.407496973.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000015.00000002.399524547.00007FF57D271000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D271000
Size:	8192

Details

Name:	00000006.00000003.357258530.0000000005780000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5780000
Size:	65536

Details

Name:	00000004.00000002.361018305.0000000003736000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3736000
Size:	36864

Details

Name:	00000006.00000003.356687863.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	65536

Details

Name:	0000001F.00000000.412743845.000000007FDF0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	4096

Details

Name:	0000001F.00000003.418222670.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000014.00000003.400036962.0000000003DE7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE7000
Size:	8192

Details

Name:	00000012.00000002.573249044.000000784E54B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000028.00000003.494092635.000002AC2DB82000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB82000
Size:	24576

Details

Name:	0000001F.00000003.415260000.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	118784

Details

Name:	00000014.00000003.387251052.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000005.00000002.362483924.0000003D0807F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D0807F000
Size:	4096

Details

Name:	00000006.00000003.358468142.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	00000006.00000002.573239518.0000000000720000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	720000
Size:	4096

Details

Name:	00000026.00000002.467017734.00007FF55A113000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A113000
Size:	28672

Details

Name:	00000019.00000003.396748191.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000005.00000002.362735634.00000202D2457000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2457000
Size:	102400

Details

Name:	0000002A.00000002.574823936.00000267C667A000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C667A000
Size:	12288

Details

Name:	0000001F.00000002.439242175.0000000001020000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1020000
Size:	16384

Details

Name:	0000001B.00000003.410789252.0000000003D21000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D21000
Size:	860160

Details

Name:	00000005.00000002.362511964.00000202D22F0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	202D22F0000
Size:	4096

Details

Name:	0000002D.00000002.575606264.00007FF5ED472000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED472000
Size:	12288

Details

Name:	0000001F.00000002.439384269.000000000109A000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	109A000
Size:	4096

Details

Name:	00000028.00000003.491954549.000002AC2DBB2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB2000
Size:	118784

Details

Name:	0000000D.00000002.366797139.0000000000480000.00000008.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	00000006.00000003.357991649.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000A.00000002.365790263.0000000000692000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	692000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000028.00000002.508411459.00007FF563C41000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C41000
Size:	12288

Details

Name:	00000028.00000003.506637052.000002AC2D24D000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D24D000
Size:	4096

Details

Name:	00000006.00000003.367692613.0000000006990000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6990000
Size:	131072

Details

Name:	00000014.00000000.372500694.000000000049B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001F.00000002.439953803.0000000002E6F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E6F000
Size:	4096

Details

Name:	00000026.00000002.466949506.00007FF55A0F7000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A0F7000
Size:	4096

Details

Name:	0000002D.00000002.573539819.0000028B30180000.00000004.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	28B30180000
Size:	4096

Details

Name:	0000002A.00000003.516604945.00000267CBC04000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC04000
Size:	4096

Details

Name:	0000001F.00000003.438208741.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000019.00000002.417737030.0000000001CE0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1CE0000
Size:	4096

Details

Name:	00000019.00000002.420906086.0000000005C60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C60000
Size:	8192

Details

Name:	0000002A.00000002.578128300.00007FF5ED87B000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED87B000
Size:	8192

Details

Name:	00000012.00000000.370258140.0000024B7C890000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	00000012.00000002.574925148.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	00000004.00000003.358777925.0000000003696000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3696000
Size:	8192

Details

Name:	0000000A.00000003.365268601.0000000004EF0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EF0000
Size:	12288

Details

Name:	00000029.00000002.489207574.00007FF552D59000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF552D59000
Size:	8192

Details

Name:	00000005.00000002.362658110.00000202D2402000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2402000
Size:	65536

Details

Name:	00000006.00000003.365209862.00000000013D3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13D3000
Size:	4096

Details

Name:	00000015.00000002.397798116.0000013E70AC0000.00000004.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	13E70AC0000
Size:	4096

Details

Name:	0000002A.00000002.578140391.00007FF5ED8FC000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED8FC000
Size:	16384

Details

Name:	00000022.00000000.421354525.00007DF55B920000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B920000
Size:	4096

Details

Name:	00000028.00000002.509074681.00007FF563E74000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E74000
Size:	20480

Details

Name:	00000000.00000003.330341198.0000000000F95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F95000
Size:	24576

Details

Name:	00000028.00000002.508063590.00007DF571AF0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571AF0000
Size:	4096

Details

Name:	0000000D.00000002.366882908.00000000FF9E2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E2000
Size:	4096

Details

Name:	00000012.00000000.370621917.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	00000019.00000002.416216274.00000000014C0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14C0000
Size:	4096

Details

Name:	00000022.00000002.442940890.00007FF54DA9B000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA9B000
Size:	8192

Details

Name:	0000001B.00000003.426497401.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	00000006.00000002.579530903.000000000507D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	507D000
Size:	12288

Details

Name:	0000001F.00000003.415437450.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	172032

Details

Name:	0000000D.00000002.366865971.00000000FF9D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D0000
Size:	4096

Details

Name:	00000019.00000002.418374066.0000000003297000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3297000
Size:	32768

Details

Name:	00000019.00000003.396240449.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000005.00000002.363455588.00007FF5C317E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C317E000
Size:	28672

Details

Name:	0000001C.00000000.404679210.000000007F830000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F830000
Size:	12288

Details

Name:	00000000.00000003.333300678.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	8192

Details

Name:	00000005.00000002.362418291.0000003D079BE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D079BE000
Size:	8192

Details

Name:	0000002A.00000002.577500073.00007FF5ED221000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED221000
Size:	4096

Details

Name:	00000028.00000002.508162184.00007FF5637F7000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5637F7000
Size:	12288

Details

Name:	00000004.00000002.361479262.00000000FF220000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF220000
Size:	4096

Details

Name:	00000022.00000003.441768238.0000017AD1E7E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E7E000
Size:	36864

Details

Name:	00000015.00000002.397754892.0000001DB8EFF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8EFF000
Size:	4096

Details

Name:	0000001F.00000002.439252660.0000000001050000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1050000
Size:	16384

Details

Name:	00000028.00000002.507457711.000002AC2D25B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D25B000
Size:	86016

Details

Name:	0000001B.00000003.426348538.0000000000511000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	511000
Size:	12288

Details

Name:	00000012.00000002.573986833.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	00000028.00000002.507895875.000002AC2DB1A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB1A000
Size:	4096

Details

Name:	00000015.00000003.396837809.0000013E70E3A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70E3A000
Size:	20480

Details

Name:	0000001F.00000002.439229813.0000000001010000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1010000
Size:	8192

Details

Name:	0000001F.00000002.439756234.00000000013D4000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13D4000
Size:	8192

Details

Name:	00000005.00000002.363030447.00007DF5D0EC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EC0000
Size:	4096

Details

Name:	00000019.00000002.416048679.00000000014B0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14B0000
Size:	4096

Details

Name:	0000001B.00000003.426338016.000000000052C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	4096

Details

Name:	0000001B.00000000.396680134.00000000FF290000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF290000
Size:	4096

Details

Name:	0000001F.00000002.440566846.0000000005840000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5840000
Size:	8192

Details

Name:	0000001B.00000003.425710178.0000000000561000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	561000
Size:	45056

Details

Name:	00000006.00000003.408643096.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	00000019.00000003.413884570.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	49152

Details

Name:	00000012.00000000.393917576.000000784EA7C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7C000
Size:	16384

Details

Name:	0000001F.00000002.440623339.00000000059FF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59FF000
Size:	4096

Details

Name:	00000004.00000002.361491614.00000000FF222000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF222000
Size:	4096

Details

Name:	00000006.00000000.351394485.000000007FFA0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA0000
Size:	4096

Details

Name:	0000001C.00000002.407670114.000000000151E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	151E000
Size:	8192

Details

Name:	0000001B.00000002.429006074.00000000FF282000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF282000
Size:	4096

Details

Name:	00000004.00000003.358349289.00000000036C9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C9000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000002D.00000002.573689829.0000028B301C0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B301C0000
Size:	12288

Details

Name:	00000019.00000002.421055360.000000007F080000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F080000
Size:	4096

Details

Name:	00000012.00000000.370682896.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	0000002A.00000002.575443790.00000267C6E00000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6E00000
Size:	4096

Details

Name:	00000029.00000002.489361069.00007FF553483000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553483000
Size:	12288

Details

Name:	00000022.00000003.441878940.0000017AD1E4C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E4C000
Size:	12288

Details

Name:	00000006.00000003.353432475.0000000001358000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1358000
Size:	28672

Details

Name:	00000014.00000003.391461190.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000000.00000002.333915860.0000000002D30000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D30000
Size:	8192

Details

Name:	0000001B.00000003.426806552.00000000004DB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DB000
Size:	8192

Details

Name:	00000006.00000002.574266727.00000000011D3000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11D3000
Size:	4096

Details

Name:	00000006.00000003.355327889.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000028.00000003.490227213.000002AC2DBAE000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBAE000
Size:	4096

Details

Name:	00000028.00000002.509005017.00007FF563E0D000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E0D000
Size:	12288

Details

Name:	00000006.00000003.357915892.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	45056

Details

Name:	00000006.00000003.512323065.00000000013DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DE000
Size:	4096

Details

Name:	00000028.00000003.492493201.000002AC2E063000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E063000
Size:	397312

Details

Name:	00000015.00000002.397905552.0000013E70B90000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70B90000
Size:	28672

Details

Name:	00000000.00000002.333868632.00000000011FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11FB000
Size:	16384

Details

Name:	00000004.00000002.359887937.0000000000860000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	860000
Size:	4096

Details

Name:	00000004.00000003.358423564.00000000036C7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	8192

Details

Name:	0000001B.00000003.426923735.00000000004D1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D1000
Size:	24576

Details

Name:	00000014.00000000.372491683.0000000000480000.00000008.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	0000002A.00000002.575465038.00000267C6E02000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6E02000
Size:	4096

Details

Name:	00000019.00000002.417556578.0000000001960000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1960000
Size:	36864

Details

Name:	0000001F.00000003.438640936.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001B.00000002.428732304.0000000001AC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC0000
Size:	69632

Details

Name:	00000028.00000002.507444243.000002AC2D258000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D258000
Size:	8192

Details

Name:	00000014.00000003.400055049.0000000003DFB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DFB000
Size:	565248

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000012.00000000.394596267.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	0000000A.00000002.366308682.00000000028C1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28C1000
Size:	40960

Details

Name:	00000014.00000003.400387455.0000000003E7D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E7D000
Size:	32768

Details

Name:	0000000A.00000002.366052806.0000000000F1E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F1E000
Size:	8192

Details

Name:	00000016.00000002.391100321.0000000000EE0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EE0000
Size:	4096

Details

Name:	0000000F.00000000.368673097.00000000007F0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000000.00000003.329674440.0000000007181000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7181000
Size:	196608

Details

Name:	00000014.00000003.387282420.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000022.00000002.443396096.00007FF54DC82000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC82000
Size:	12288

Details

Name:	00000019.00000003.414005651.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	00000028.00000003.482125978.000002AC2DBA2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA2000
Size:	126976

Details

Name:	0000002A.00000002.573447236.000000A9454FA000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9454FA000
Size:	24576

Details

Name:	0000001F.00000003.415382464.00000000011C8000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	12288

Details

Name:	0000001B.00000003.426386640.00000000004EE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE000
Size:	4096

Details

Name:	00000006.00000003.364030500.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	28672

Details

Name:	00000006.00000002.573559430.000000000089B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	89B000
Size:	4096

Details

Name:	00000000.00000002.333576448.0000000000560000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	560000
Size:	16384

Details

Name:	0000001B.00000003.422787604.00000000004E7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E7000
Size:	8192

Details

Name:	0000000A.00000002.365803219.000000000069A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	69A000
Size:	4096

Details

Name:	0000001B.00000003.407374852.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000028.00000002.508185402.00007FF56380C000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56380C000
Size:	4096

Details

Name:	00000006.00000003.364538457.00000000060B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60B0000
Size:	8192

Details

Name:	0000001F.00000002.439847837.0000000001410000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1410000
Size:	12288

Details

Name:	00000019.00000003.396287032.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000028.00000002.508724214.00007FF563D99000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D99000
Size:	8192

Details

Name:	0000001F.00000002.438975724.00000000003F0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000000.00000002.333548736.00000000004F0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4F0000
Size:	4096

Details

Name:	0000001F.00000003.425297565.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000004.00000003.357262933.000000000373F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	373F000
Size:	36864

Details

Name:	0000000D.00000000.366495909.000000000049B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000003.401104224.0000000003E55000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E55000
Size:	16384

Details

Name:	00000014.00000002.406559541.00000000FF640000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF640000
Size:	4096

Details

Name:	00000029.00000002.488902859.00000199BA210000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA210000
Size:	8192

Details

Name:	00000014.00000002.404929470.0000000003E5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5E000
Size:	8192

Details

Name:	0000001B.00000002.427499954.00000000000C0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C0000
Size:	4096

Details

Name:	0000002A.00000002.576348019.00000267CBC4E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC4E000
Size:	73728

Details

Name:	0000001F.00000003.420986189.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001B.00000002.429034912.00000000FF292000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF292000
Size:	4096

Details

Name:	00000015.00000002.400100757.00007FF57D357000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D357000
Size:	57344

Details

Name:	00000004.00000002.359804187.0000000000497000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	497000
Size:	12288

Details

Name:	00000012.00000000.394120528.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	73728

Details

Name:	00000019.00000003.398641857.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	00000006.00000003.353890811.0000000001354000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1354000
Size:	8192

Details

Name:	0000001F.00000003.425760580.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	86016

Details

Name:	00000004.00000003.358639443.00000000036B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B9000
Size:	8192

Details

Name:	00000014.00000002.404335290.000000000259E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	259E000
Size:	8192

Details

Name:	00000000.00000002.333757590.0000000000E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E70000
Size:	4096

Details

Name:	00000028.00000002.507031772.000000FA93477000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA93477000
Size:	36864

Details

Name:	00000019.00000002.421115720.000000007F0A0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0A0000
Size:	12288

Details

Name:	00000006.00000003.361158093.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000000.351405340.000000007FFA2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA2000
Size:	4096

Details

Name:	0000001F.00000002.439867099.0000000001520000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1520000
Size:	36864

Details

Name:	00000029.00000002.488555644.0000000257E7F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257E7F000
Size:	4096

Details

Name:	00000014.00000003.390823973.0000000004C01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C01000
Size:	860160

Details

Name:	00000006.00000003.416773244.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	00000028.00000002.508104873.00007DF571B10000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B10000
Size:	12288

Details

Name:	0000001F.00000003.421013789.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000003.420366644.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001F.00000003.417924405.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000006.00000002.576587946.0000000002EB1000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EB1000
Size:	49152

Details

Name:	00000005.00000002.362692461.00000202D2429000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2429000
Size:	73728

Details

Name:	0000001F.00000002.439730820.00000000013C0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13C0000
Size:	28672

Details

Name:	0000001F.00000003.420136536.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	65536

Details

Name:	00000015.00000003.397010898.0000013E72A8C000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A8C000
Size:	20480

Details

Name:	00000006.00000000.351332704.000000007FF90000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF90000
Size:	4096

Details

Name:	0000000F.00000002.371110920.000000007F1F2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F2000
Size:	4096

Details

Name:	0000000D.00000002.366878128.00000000FF9E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E0000
Size:	4096

Details

Name:	00000019.00000003.395517381.0000000001578000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1578000
Size:	8192

Details

Name:	00000014.00000003.402454125.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	0000001C.00000002.407754214.0000000001564000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1564000
Size:	24576

Details

Name:	0000001F.00000003.417885717.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001F.00000003.415563499.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000002A.00000002.573656338.000000A945A7E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945A7E000
Size:	8192

Details

Name:	0000002A.00000002.576851561.00000267CBCFB000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCFB000
Size:	8192

Details

Name:	00000022.00000002.442532749.0000017AD1E8A000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E8A000
Size:	32768

Details

Name:	00000006.00000003.366010984.0000000006D00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D00000
Size:	8192

Details

Name:	00000028.00000002.507651935.000002AC2D2EF000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2EF000
Size:	45056

Details

Name:	00000006.00000003.353982930.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.415394075.00000000011B9000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11B9000
Size:	8192

Details

Name:	00000005.00000002.362902489.00000202D26D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D26D0000
Size:	4096

Details

Name:	00000019.00000003.396580251.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000019.00000002.415421417.0000000000B90000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B90000
Size:	16384

Details

Name:	00000006.00000003.356850851.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.415288507.00000000011BC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11BC000
Size:	8192

Details

Name:	0000001F.00000003.417165770.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000000.00000002.333679921.0000000000C3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C3E000
Size:	8192

Details

Name:	00000026.00000002.466984523.00007FF55A10D000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A10D000
Size:	4096

Details

Name:	00000004.00000003.357365961.0000000003719000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3719000
Size:	8192

Details

Name:	0000001C.00000001.404841660.0000000000EA0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA0000
Size:	4096

Details

Name:	00000006.00000003.459829286.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	4096

Details

Name:	00000006.00000003.356754846.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000004.00000000.332635593.00000000003F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000019.00000003.395408104.0000000001567000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1567000
Size:	36864

Details

Name:	00000006.00000003.352879158.00000000013A2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13A2000
Size:	20480

Details

Name:	0000002A.00000002.576802108.00000267CBCE5000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCE5000
Size:	24576

Details

Name:	0000001B.00000002.428641920.00000000014BE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14BE000
Size:	8192

Details

Name:	00000015.00000003.397052310.0000013E70BE1000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BE1000
Size:	57344

Details

Name:	0000001B.00000003.425561215.000000000054B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54B000
Size:	57344

Details

Name:	0000002A.00000002.573482159.000000A9455FA000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9455FA000
Size:	24576

Details

Name:	00000006.00000003.359388597.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000000.00000002.333846459.0000000001180000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1180000
Size:	4096

Details

Name:	0000002D.00000002.575698440.00007FF5ED484000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED484000
Size:	20480

Details

Name:	00000022.00000002.443470893.00007FF54DCA1000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCA1000
Size:	32768

Details

Name:	00000019.00000000.393957916.000000007F092000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F092000
Size:	4096

Details

Name:	00000015.00000002.400189410.00007FF57D3BA000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3BA000
Size:	12288

Details

Name:	00000006.00000003.357475801.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	20480

Details

Name:	00000006.00000002.580037997.0000000005730000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5730000
Size:	65536

Details

Name:	00000006.00000003.359942114.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	0000001C.00000002.408020732.0000000001633000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1633000
Size:	188416

Details

Name:	00000000.00000003.328813157.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	4096

Details

Name:	0000001F.00000003.421484896.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	57344

Details

Name:	00000012.00000000.393953740.0000024B7C830000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	0000001F.00000003.414905935.00000000011C3000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C3000
Size:	32768

Details

Name:	00000028.00000003.489360466.000002AC2DB04000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB04000
Size:	81920

Details

Name:	00000006.00000003.354734412.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000003.390284658.0000000004C43000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C43000
Size:	499712

Details

Name:	00000028.00000003.484855586.000002AC2DB78000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB78000
Size:	4096

Details

Name:	0000001B.00000003.426682087.0000000000507000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	507000
Size:	4096

Details

Name:	00000004.00000000.332824160.0000000000480000.00000008.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	0000000A.00000000.363621448.000000007FEE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	12288

Details

Name:	0000001B.00000000.396687296.00000000FF292000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF292000
Size:	4096

Details

Name:	00000005.00000002.362434664.0000003D07DFB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D07DFB000
Size:	20480

Details

Name:	00000015.00000002.398137641.0000013E70C3A000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70C3A000
Size:	94208

Details

Name:	00000005.00000000.350760748.00007DF5D0EB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EB0000
Size:	4096

Details

Name:	00000006.00000003.353655698.00000000013A4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13A4000
Size:	24576

Details

Name:	00000006.00000002.582032295.000000007FFB0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	12288

Details

Name:	00000014.00000003.390551017.0000000003E85000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E85000
Size:	65536

Details

Name:	00000000.00000003.307703052.0000000000F37000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F37000
Size:	20480

Details

Name:	0000001C.00000000.404545815.0000000000EA2000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA2000
Size:	28672

Details

Name:	0000002D.00000000.549030057.00007DF5FB100000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB100000
Size:	4096

Details

Name:	0000000F.00000002.370811682.0000000000FAD000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FAD000
Size:	4096

Details

Name:	0000001C.00000002.407333116.0000000000ED0000.00000004.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	ED0000
Size:	4096

Details

Name:	00000028.00000002.507930836.000002AC2DB22000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB22000
Size:	192512

Details

Name:	00000006.00000003.533348537.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000019.00000002.419024907.0000000005930000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5930000
Size:	12288

Details

Name:	00000014.00000003.401943895.0000000003F4B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F4B000
Size:	16384

Details

Name:	00000015.00000002.397740586.0000001DB8DFE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8DFE000
Size:	8192

Details

Name:	00000019.00000003.399678092.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	40960

Details

Name:	00000029.00000002.489591283.00007FF553539000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553539000
Size:	12288

Details

Name:	00000028.00000003.489416055.000002AC2DB1C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB1C000
Size:	20480

Details

Name:	00000019.00000003.399834069.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	24576

Details

Name:	0000001B.00000002.427582465.000000000030E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30E000
Size:	8192

Details

Name:	0000000F.00000003.370170690.0000000002AB3000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB3000
Size:	53248

Details

Name:	00000014.00000002.405357727.0000000004ABF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4ABF000
Size:	4096

Details

Name:	0000001F.00000003.423321303.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	8192

Details

Name:	00000028.00000003.492122760.000002AC2DBB5000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB5000
Size:	200704

Details

Name:	0000002A.00000002.577935717.00007FF5ED7D6000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7D6000
Size:	4096

Details

Name:	00000014.00000003.402491230.0000000003F48000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F48000
Size:	8192

Details

Name:	00000015.00000002.398084532.0000013E70BF2000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BF2000
Size:	290816

Details

Name:	00000015.00000002.398045416.0000013E70BDD000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BDD000
Size:	16384

Details

Name:	00000006.00000003.357976367.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000000.00000000.306915188.0000000000CDD000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	CDD000
Size:	4096

Details

Name:	0000001B.00000002.427915618.0000000000482000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	482000
Size:	20480

Details

Name:	0000001F.00000003.415190168.0000000001171000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1171000
Size:	131072

Details

Name:	00000012.00000002.574469825.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000000.00000002.333923046.0000000002D40000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D40000
Size:	733184

Details

Name:	00000012.00000000.370456934.0000024B7D202000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	0000002A.00000003.524347556.00000267C6F18000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F18000
Size:	4096

Details

Name:	00000019.00000002.416326353.00000000014E0000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14E0000
Size:	36864

Details

Name:	00000022.00000002.442574934.0000017AD1F02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1F02000
Size:	16384

Details

Name:	0000001F.00000002.439620994.0000000001180000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1180000
Size:	253952

Details

Name:	00000015.00000002.400299282.00007FF57D3D1000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3D1000
Size:	16384

Details

Name:	00000014.00000003.401128201.0000000003E36000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E36000
Size:	69632

Details

Name:	00000029.00000002.489379251.00007FF553487000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553487000
Size:	16384

Details

Name:	00000006.00000003.354888092.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000005.00000002.362708897.00000202D243C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D243C000
Size:	86016

Details

Name:	00000015.00000002.397628281.0000001DB85FE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB85FE000
Size:	8192

Details

Name:	00000004.00000003.358934852.0000000003745000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3745000
Size:	12288

Details

Name:	00000028.00000003.493646066.000002AC2DB9F000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB9F000
Size:	69632

Details

Name:	0000001F.00000003.417358909.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.381924785.00000000070C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70C0000
Size:	57344

Details

Name:	00000028.00000002.507908885.000002AC2DB1C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB1C000
Size:	20480

Details

Name:	00000005.00000002.362618806.00000202D2370000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2370000
Size:	16384

Details

Name:	00000016.00000000.390599196.0000000000472000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000014.00000002.404655584.0000000003DF1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF1000
Size:	8192

Details

Name:	0000000F.00000003.370270534.0000000002AD0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AD0000
Size:	16384

Details

Name:	0000002A.00000002.577745217.00007FF5ED68F000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED68F000
Size:	20480

Details

Name:	00000006.00000000.351425411.000000007FFB0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	12288

Details

Name:	0000001F.00000003.415652578.0000000001171000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1171000
Size:	12288

Details

Name:	00000006.00000003.358940234.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	4096

Details

Name:	00000006.00000003.357233111.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	40960

Details

Name:	0000000A.00000002.366395949.000000007FEC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEC0000
Size:	4096

Details

Name:	00000006.00000003.357508024.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	12288

Details

Name:	00000006.00000003.459330699.000000000699D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699D000
Size:	126976

Details

Name:	00000028.00000002.508371679.00007FF563BEF000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563BEF000
Size:	4096

Details

Name:	00000006.00000002.574445581.00000000011ED000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11ED000
Size:	4096

Details

Name:	00000028.00000003.490661084.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	851968

Details

Name:	00000006.00000003.356267869.0000000005760000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5760000
Size:	61440

Details

Name:	00000028.00000002.507479864.000002AC2D271000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D271000
Size:	61440

Details

Name:	00000028.00000002.508558433.00007FF563D11000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D11000
Size:	12288

Details

Name:	00000015.00000002.398305247.0000013E71040000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E71040000
Size:	69632

Details

Name:	00000006.00000003.540957782.000000000699C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699C000
Size:	8192

Details

Name:	00000006.00000003.354096198.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	28672

Details

Name:	00000006.00000003.356792030.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	49152

Details

Name:	00000004.00000002.360620549.00000000012FA000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	12FA000
Size:	143360

Details

Name:	00000014.00000002.403167438.00000000003F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000006.00000002.573312507.0000000000750000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	750000
Size:	4096

Details

Name:	00000019.00000003.395082081.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000019.00000003.396619375.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000001B.00000003.407151928.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000004.00000003.358950807.000000000377C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	377C000
Size:	8192

Details

Name:	0000000F.00000002.371118561.000000007F200000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F200000
Size:	12288

Details

Name:	0000000F.00000002.371028759.0000000001560000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1560000
Size:	4096

Details

Name:	00000029.00000002.488643406.00000199B9FB0000.00000004.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	199B9FB0000
Size:	4096

Details

Name:	00000028.00000002.507785405.000002AC2D890000.00000008.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2AC2D890000
Size:	266240

Details

Name:	00000019.00000003.394923975.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	176128

Details

Name:	0000002A.00000002.577906586.00007FF5ED7AA000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7AA000
Size:	4096

Details

Name:	00000014.00000003.402722798.0000000003DF5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF5000
Size:	4096

Details

Name:	00000028.00000003.483992369.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	4096

Details

Name:	00000012.00000002.574550897.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	00000000.00000003.333184340.0000000000E60000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	E60000
Size:	16384

Details

Name:	00000019.00000003.396643704.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.356207665.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	45056

Details

Name:	00000019.00000003.395450625.0000000001520000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1520000
Size:	131072

Details

Name:	0000002A.00000002.573724900.000000A945BFF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945BFF000
Size:	4096

Details

Name:	00000014.00000003.391750489.0000000003E85000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E85000
Size:	4096

Details

Name:	0000000D.00000000.366590380.00000000FF9F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9F0000
Size:	12288

Details

Name:	00000012.00000000.394266278.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	0000001B.00000003.425901691.0000000000555000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	16384

Details

Name:	00000014.00000003.395144489.0000000003EC4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC4000
Size:	8192

Details

Name:	00000006.00000003.352904219.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000002D.00000002.573573503.0000028B30190000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30190000
Size:	4096

Details

Name:	00000022.00000002.442624621.0000017AD20D0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD20D0000
Size:	4096

Details

Name:	00000004.00000003.357249718.00000000036B7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B7000
Size:	16384

Details

Name:	00000004.00000003.350167673.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000006.00000003.518273899.00000000013EC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13EC000
Size:	12288

Details

Name:	0000001B.00000003.426269316.000000000052A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52A000
Size:	12288

Details

Name:	00000014.00000002.404286645.0000000001D9C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D9C000
Size:	16384

Details

Name:	0000001B.00000003.426723206.0000000000506000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	506000
Size:	4096

Details

Name:	00000006.00000003.354989136.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000002.421098028.000000007F092000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F092000
Size:	4096

Details

Name:	00000006.00000003.403980064.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	0000002A.00000002.576653950.00000267CBCB1000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCB1000
Size:	36864

Details

Name:	00000026.00000002.465776681.000000F451C79000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F451C79000
Size:	28672

Details

Name:	0000001B.00000003.426328238.000000000051A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A000
Size:	32768

Details

Name:	00000014.00000002.403659205.0000000000DE0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DE0000
Size:	16384

Details

Name:	00000006.00000003.357365038.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	24576

Details

Name:	00000012.00000002.574898975.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000019.00000003.399792602.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002D.00000002.574476506.0000028B30550000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30550000
Size:	4096

Details

Name:	00000014.00000003.391067498.0000000004C01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C01000
Size:	217088

Details

Name:	0000001F.00000003.417633781.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000015.00000003.397398175.0000013E70E3B000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70E3B000
Size:	16384

Details

Name:	00000015.00000000.386609678.0000013E70AE0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70AE0000
Size:	102400

Details

Name:	00000015.00000003.387962425.0000013E72A78000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A78000
Size:	24576

Details

Name:	0000000A.00000003.365230721.0000000004EA3000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA3000
Size:	53248

Details

Name:	00000005.00000002.363128887.00007FF5C2D31000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2D31000
Size:	20480

Details

Name:	00000006.00000002.581184537.000000000665B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	665B000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000005.00000002.362983052.00007DF4CED80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4CED80000
Size:	20480

Details

Name:	00000004.00000003.358195214.00000000036DB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36DB000
Size:	12288

Details

Name:	00000006.00000003.354822450.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000004.00000003.352475469.000000000377E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	377E000
Size:	12288

Details

Name:	00000019.00000003.396397321.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001B.00000002.428290657.00000000006E2000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E2000
Size:	8192

Details

Name:	0000001F.00000003.425425102.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	16384

Details

Name:	00000006.00000003.356976182.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	4096

Details

Name:	00000019.00000003.395899526.0000000003410000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3410000
Size:	28672

Details

Name:	0000001B.00000003.426696174.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000015.00000002.399087055.00007FF57CF8D000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CF8D000
Size:	4096

Details

Name:	00000006.00000003.513638768.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	0000002A.00000002.573768302.000000A945D7E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945D7E000
Size:	8192

Details

Name:	0000001B.00000003.425369190.000000000038A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	38A000
Size:	20480

Details

Name:	0000001B.00000003.410719325.0000000003DA0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DA0000
Size:	430080

Details

Name:	00000014.00000003.402938675.0000000003E5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5E000
Size:	8192

Details

Name:	00000006.00000003.365117818.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	4096

Details

Name:	0000001F.00000003.425043238.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000006.00000002.579979778.0000000005660000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5660000
Size:	4096

Details

Name:	00000015.00000002.399352002.00007FF57D1E7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D1E7000
Size:	4096

Details

Name:	0000001F.00000003.415785067.00000000011CD000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CD000
Size:	36864

Details

Name:	00000006.00000003.354351061.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	20480

Details

Name:	00000004.00000003.349976340.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	217088

Details

Name:	00000006.00000002.581462296.0000000006980000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6980000
Size:	81920

Details

Name:	0000001B.00000002.428317320.0000000000BEF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BEF000
Size:	69632

Details

Name:	0000002D.00000002.575238369.00007FF5ED2B2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED2B2000
Size:	8192

Details

Name:	00000014.00000003.401457120.0000000003E39000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E39000
Size:	45056

Details

Name:	00000006.00000003.460087795.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000019.00000003.396723683.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000014.00000003.402586283.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	0000000A.00000000.363606184.000000007FED2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	00000006.00000002.581508836.000000000699C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	699C000
Size:	135168

Details

Name:	0000002A.00000002.573742672.000000A945C7E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945C7E000
Size:	8192

Details

Name:	00000028.00000003.490304883.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	319488

Details

Name:	00000000.00000002.333625602.00000000008E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8E3000
Size:	12288

Details

Name:	0000001F.00000002.439292318.000000000107D000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	107D000
Size:	4096

Details

Name:	00000006.00000003.475650686.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000F.00000002.370965602.00000000011C0000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11C0000
Size:	8192

Details

Name:	0000002A.00000002.573809598.000000A945F7F000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945F7F000
Size:	4096

Details

Name:	0000001F.00000003.420427522.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000002.421001367.00000000064AF000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	64AF000
Size:	4096

Details

Name:	00000006.00000003.355166309.0000000005660000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5660000
Size:	20480

Details

Name:	00000004.00000002.360365851.0000000001165000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1165000
Size:	16384

Details

Name:	0000001F.00000003.415671435.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	131072

Details

Name:	0000000F.00000001.368858184.00000000007F0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000012.00000002.573515504.0000024B7C870000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	0000001B.00000002.427594926.000000000035E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35E000
Size:	8192

Details

Name:	00000005.00000002.363155105.00007FF5C2DF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2DF0000
Size:	4096

Details

Name:	00000028.00000003.487103963.000002AC2DBAD000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBAD000
Size:	77824

Details

Name:	0000001C.00000002.408185487.0000000001C70000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C70000
Size:	4096

Details

Name:	00000005.00000000.350780024.00007DF5D0EC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EC0000
Size:	4096

Details

Name:	00000026.00000002.466124417.0000024187E4E000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E4E000
Size:	8192

Details

Name:	00000004.00000003.345540465.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	4096

Details

Name:	00000006.00000003.357139572.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000004.00000002.360704472.0000000001AEC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AEC000
Size:	16384

Details

Name:	00000028.00000002.508777661.00007FF563DA3000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DA3000
Size:	28672

Details

Name:	0000001F.00000003.415636258.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000000.00000002.334056474.00000000050ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50ED000
Size:	12288

Details

Name:	00000019.00000002.418994333.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000014.00000003.394119611.0000000003EA4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA4000
Size:	98304

Details

Name:	00000000.00000003.333242234.0000000000F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9F000
Size:	204800

Details

Name:	00000006.00000003.354952888.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000028.00000002.509023588.00007FF563E62000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E62000
Size:	12288

Details

Name:	00000028.00000002.508230532.00007FF5639F9000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5639F9000
Size:	4096

Details

Name:	0000001B.00000000.396606739.0000000000480000.00000008.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	00000014.00000003.391209622.0000000004C36000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C36000
Size:	430080

Details

Name:	0000001C.00000002.407812599.000000000158B000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	158B000
Size:	4096

Details

Name:	0000001F.00000002.439473034.00000000010EC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10EC000
Size:	4096

Details

Name:	00000000.00000002.333654503.0000000000AD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AD0000
Size:	8192

Details

Name:	00000004.00000003.358685755.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	00000028.00000002.507334127.000002AC2D200000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D200000
Size:	73728

Details

Name:	00000014.00000003.400888166.0000000003E63000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E63000
Size:	57344

Details

Name:	00000012.00000000.370269221.0000024B7C990000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	00000006.00000002.580967403.0000000005A6E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A6E000
Size:	8192

Details

Name:	0000001B.00000002.427711900.00000000003C0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C0000
Size:	4096

Details

Name:	0000001C.00000002.407391162.0000000000F3C000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F3C000
Size:	16384

Details

Name:	00000006.00000003.518244145.00000000013DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DE000
Size:	4096

Details

Name:	00000019.00000002.415249085.0000000000A30000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	102400

Details

Name:	00000019.00000003.414337278.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000005.00000002.362409396.0000003D0793E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D0793E000
Size:	8192

Details

Name:	00000006.00000003.353949875.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000002A.00000002.578086281.00007FF5ED845000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED845000
Size:	12288

Details

Name:	0000001F.00000002.439656439.00000000011C1000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11C1000
Size:	98304

Details

Name:	00000004.00000002.361413938.0000000004544000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4544000
Size:	4096

Details

Name:	0000002A.00000002.573551391.000000A9457FA000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9457FA000
Size:	24576

Details

Name:	0000000A.00000002.366146590.0000000002703000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2703000
Size:	4096

Details

Name:	0000001B.00000002.427514479.000000000024E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24E000
Size:	8192

Details

Name:	0000001F.00000002.440863060.000000007FE02000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE02000
Size:	4096

Details

Name:	00000006.00000002.576359184.0000000002E80000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E80000
Size:	28672

Details

Name:	00000006.00000002.574362985.00000000011E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11E0000
Size:	40960

Details

Name:	00000006.00000003.359714233.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	32768

Details

Name:	00000019.00000003.399392385.0000000001526000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1526000
Size:	40960

Details

Name:	00000026.00000002.465827581.0000024187D00000.00000004.00000040.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24187D00000
Size:	4096

Details

Name:	0000002A.00000002.578107076.00007FF5ED84C000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED84C000
Size:	4096

Details

Name:	0000000A.00000000.363601070.000000007FED0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	0000001B.00000002.427999469.00000000004D4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D4000
Size:	8192

Details

Name:	00000028.00000000.475191351.00007DF571B02000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B02000
Size:	4096

Details

Name:	00000028.00000002.508900828.00007FF563DDB000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DDB000
Size:	12288

Details

Name:	0000001F.00000003.420305479.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	49152

Details

Name:	00000006.00000002.576643064.0000000002ECF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ECF000
Size:	4096

Details

Name:	00000012.00000002.573351570.0000024B7C820000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000019.00000003.398011042.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	12288

Details

Name:	00000015.00000002.399830960.00007FF57D2FE000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2FE000
Size:	28672

Details

Name:	00000006.00000003.358355556.0000000005870000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5870000
Size:	65536

Details

Name:	00000005.00000002.362917250.00000202D28D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D28D0000
Size:	12288

Details

Name:	00000026.00000002.467052269.00007FF55A123000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A123000
Size:	12288

Details

Name:	00000006.00000003.362828544.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000002A.00000002.576941330.00000267CBF10000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF10000
Size:	4096

Details

Name:	00000028.00000002.507675033.000002AC2D302000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D302000
Size:	16384

Details

Name:	00000006.00000003.502799669.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000019.00000003.396562261.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000028.00000003.480717629.000002AC2E01D000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E01D000
Size:	118784

Details

Name:	0000000A.00000003.365305791.0000000004ED0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4ED0000
Size:	65536

Details

Name:	00000006.00000003.366506485.0000000006990000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6990000
Size:	135168

Details

Name:	00000028.00000002.507723202.000002AC2D400000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D400000
Size:	4096

Details

Name:	00000006.00000002.574637846.000000000130A000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	130A000
Size:	8192

Details

Name:	0000001C.00000002.407684676.0000000001540000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1540000
Size:	4096

Details

Name:	0000002A.00000002.573639508.000000A9459FF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9459FF000
Size:	4096

Details

Name:	0000002D.00000002.573368433.000000FFB72FA000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB72FA000
Size:	24576

Details

Name:	00000012.00000000.394616733.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	00000019.00000002.418340265.000000000328F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	328F000
Size:	4096

Details

Name:	0000001B.00000003.413126253.00000000005C6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	8192

Details

Name:	00000015.00000000.386663721.00007DF58B042000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B042000
Size:	4096

Details

Name:	00000022.00000002.443381245.00007FF54DC2D000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC2D000
Size:	8192

Details

Name:	00000004.00000002.360086834.00000000009AE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9AE000
Size:	8192

Details

Name:	0000000F.00000002.370928037.00000000011B1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11B1000
Size:	45056

Details

Name:	00000029.00000002.489654301.00007FF55355A000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55355A000
Size:	4096

Details

Name:	00000014.00000002.404458736.000000000276D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	276D000
Size:	12288

Details

Name:	00000015.00000002.398060968.0000013E70BE3000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BE3000
Size:	49152

Details

Name:	00000028.00000003.482287699.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	61440

Details

Name:	00000019.00000003.395599279.0000000001570000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1570000
Size:	24576

Details

Name:	00000019.00000003.395176688.000000000157C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157C000
Size:	24576

Details

Name:	00000028.00000003.492041334.000002AC2DB8E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8E000
Size:	319488

Details

Name:	00000019.00000003.397076740.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000000A.00000002.366102365.0000000001130000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	69632

Details

Name:	0000001F.00000003.420241793.00000000011D7000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D7000
Size:	8192

Details

Name:	00000026.00000003.465270418.0000024187E4B000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E4B000
Size:	20480

Details

Name:	00000015.00000002.399932687.00007FF57D322000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D322000
Size:	40960

Details

Name:	00000006.00000003.547763127.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000028.00000002.507210795.000002AC2D080000.00000004.00000040.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2AC2D080000
Size:	4096

Details

Name:	0000000A.00000002.366266862.0000000002770000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2770000
Size:	4096

Details

Name:	0000002A.00000002.573689245.000000A945AFF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945AFF000
Size:	4096

Details

Name:	00000012.00000000.394358686.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	00000026.00000002.466292800.00000241880D0000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	241880D0000
Size:	4096

Details

Name:	00000022.00000002.442059626.0000004E01FBB000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E01FBB000
Size:	20480

Details

Name:	00000004.00000003.349335895.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000001F.00000003.416248205.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	28672

Details

Name:	00000000.00000003.330014249.0000000000FE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE3000
Size:	65536

Details

Name:	00000006.00000003.465320706.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000014.00000003.402549494.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	00000026.00000002.466182350.0000024187E70000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E70000
Size:	57344

Details

Name:	00000028.00000003.478905066.000002AC2DB83000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB83000
Size:	94208

Details

Name:	00000012.00000000.394336345.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	00000015.00000002.398721370.00007DF58B040000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B040000
Size:	4096

Details

Name:	00000014.00000003.402850468.0000000003DD8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD8000
Size:	8192

Details

Name:	00000029.00000002.489123363.00007DF5611D2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611D2000
Size:	4096

Details

Name:	00000022.00000002.442675411.0000017AD2602000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD2602000
Size:	4096

Details

Name:	0000002D.00000003.549651919.0000028B302CE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28B302CE000
Size:	4096

Details

Name:	00000019.00000003.396020696.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	0000001B.00000003.421265433.00000000004E5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E5000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000019.00000003.414183437.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000002A.00000003.516687235.00000267CBE24000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBE24000
Size:	4096

Details

Name:	0000001F.00000003.424966176.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000014.00000002.404995356.0000000003E74000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E74000
Size:	36864

Details

Name:	0000001B.00000003.407220691.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000014.00000000.372359034.00000000003F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000005.00000002.362828597.00000202D2502000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2502000
Size:	16384

Details

Name:	00000004.00000002.361091883.000000000377C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	377C000
Size:	8192

Details

Name:	00000029.00000002.489491421.00007FF5534BE000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5534BE000
Size:	8192

Details

Name:	0000001C.00000000.404614395.000000007F810000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F810000
Size:	4096

Details

Name:	0000000A.00000002.366245827.0000000002750000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2750000
Size:	4096

Details

Name:	00000022.00000002.443503529.00007FF54DCB1000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCB1000
Size:	16384

Details

Name:	00000028.00000002.508915920.00007FF563DE3000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DE3000
Size:	24576

Details

Name:	00000015.00000002.397697903.0000001DB8AFE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8AFE000
Size:	8192

Details

Name:	0000002A.00000002.577635302.00007FF5ED5F9000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED5F9000
Size:	4096

Details

Name:	00000012.00000002.573383852.0000024B7C840000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	0000001C.00000002.407976347.000000000160A000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	160A000
Size:	126976

Details

Name:	0000000F.00000002.370843681.0000000000FD7000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FD7000
Size:	4096

Details

Name:	00000015.00000000.386651478.00007DF58B032000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B032000
Size:	4096

Details

Name:	0000001F.00000002.439027536.0000000000433000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	433000
Size:	4096

Details

Name:	0000001F.00000002.439303199.0000000001080000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1080000
Size:	40960

Details

Name:	00000000.00000003.329197438.0000000007244000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7244000
Size:	192512

Details

Name:	00000004.00000002.360517650.0000000001210000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1210000
Size:	4096

Details

Name:	00000000.00000003.330579605.0000000000F6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6D000
Size:	8192

Details

Name:	00000006.00000002.580105888.0000000005770000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5770000
Size:	65536

Details

Name:	00000014.00000003.402329979.0000000003E02000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E02000
Size:	12288

Details

Name:	00000014.00000003.387664123.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000022.00000002.442274720.0000017AD1D30000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD1D30000
Size:	102400

Details

Name:	00000012.00000002.573275919.000000784EA7C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7C000
Size:	16384

Details

Name:	00000006.00000003.366428553.00000000069B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B0000
Size:	4096

Details

Name:	0000001F.00000003.419263245.0000000005540000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5540000
Size:	65536

Details

Name:	0000001B.00000003.426360533.0000000000512000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512000
Size:	8192

Details

Name:	00000014.00000003.400584066.0000000003E71000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E71000
Size:	49152

Details

Name:	0000000D.00000000.366348966.00000000003F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000004.00000002.359766285.0000000000481000.00000008.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	481000
Size:	4096

Details

Name:	0000002A.00000002.575225117.00000267C6AD0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6AD0000
Size:	12288

Details

Name:	00000019.00000003.400960348.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	8192

Details

Name:	0000000F.00000002.370546381.0000000000A30000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	102400

Details

Name:	00000028.00000003.480517653.000002AC2DBA0000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA0000
Size:	114688

Details

Name:	00000028.00000002.507566021.000002AC2D2AF000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2AF000
Size:	69632

Details

Name:	0000001B.00000003.426757571.0000000000388000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	388000
Size:	8192

Details

Name:	00000005.00000002.363186537.00007FF5C3001000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3001000
Size:	8192

Details

Name:	00000006.00000003.364944170.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	16384

Details

Name:	00000004.00000002.360587152.000000000127D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	127D000
Size:	8192

Details

Name:	0000001B.00000003.407631266.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000006.00000003.366542336.000000000698E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	698E000
Size:	8192

Details

Name:	0000001F.00000003.426142869.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	49152

Details

Name:	00000004.00000003.358323484.00000000036C3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C3000
Size:	36864

Details

Name:	0000001F.00000003.421089465.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	65536

Details

Name:	00000006.00000002.581764709.0000000006F7E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F7E000
Size:	8192

Details

Name:	0000002D.00000002.575305986.00007FF5ED3A6000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3A6000
Size:	4096

Details

Name:	0000001F.00000002.439929503.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	57344

Details

Name:	00000028.00000003.480979078.000002AC2DB85000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB85000
Size:	16384

Details

Name:	00000006.00000003.353487980.00000000013A4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13A4000
Size:	24576

Details

Name:	0000001F.00000002.440205035.0000000004F7C000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F7C000
Size:	16384

Details

Name:	00000014.00000003.387472774.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000001F.00000002.439905867.00000000018A0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18A0000
Size:	4096

Details

Name:	00000014.00000003.387348846.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000001F.00000002.439686901.00000000011F5000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11F5000
Size:	4096

Details

Name:	00000005.00000002.363274247.00007FF5C30AB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C30AB000
Size:	24576

Details

Name:	0000002A.00000002.578210868.00007FF5ED915000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED915000
Size:	4096

Details

Name:	00000026.00000002.467230515.00007FF55A1D9000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1D9000
Size:	12288

Details

Name:	00000019.00000003.399888234.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	65536

Details

Name:	00000012.00000000.394230358.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	16384

Details

Name:	00000004.00000003.346553230.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000019.00000002.420947924.0000000005D9E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D9E000
Size:	8192

Details

Name:	00000019.00000003.397911140.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	16384

Details

Name:	00000006.00000003.491430471.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001B.00000003.425655059.0000000000561000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	561000
Size:	45056

Details

Name:	00000006.00000003.352859148.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	143360

Details

Name:	00000022.00000002.443140191.00007FF54DBC3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBC3000
Size:	28672

Details

Name:	00000006.00000003.353352167.0000000001356000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1356000
Size:	32768

Details

Name:	00000028.00000003.492356791.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	794624

Details

Name:	00000006.00000003.353054010.0000000001356000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1356000
Size:	32768

Details

Name:	00000015.00000002.398572707.0000013E72A77000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A77000
Size:	4096

Details

Name:	00000000.00000003.307940925.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	4096

Details

Name:	00000006.00000002.580081906.0000000005760000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5760000
Size:	8192

Details

Name:	00000004.00000003.358757083.0000000003691000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3691000
Size:	12288

Details

Name:	00000014.00000003.394097567.0000000003EC4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC4000
Size:	8192

Details

Name:	0000001F.00000003.418929064.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	45056

Details

Name:	0000001B.00000002.428909624.0000000003D1E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D1E000
Size:	8192

Details

Name:	00000026.00000002.465973366.0000024187D90000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187D90000
Size:	4096

Details

Name:	0000001F.00000003.438360641.0000000005810000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5810000
Size:	49152

Details

Name:	00000029.00000002.488663844.00000199B9FD0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199B9FD0000
Size:	102400

Details

Name:	0000000A.00000002.366216830.0000000002730000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2730000
Size:	4096

Details

Name:	00000014.00000003.402235346.0000000003E05000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E05000
Size:	24576

Details

Name:	0000001B.00000003.426734634.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	00000014.00000003.387561480.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000026.00000002.467180648.00007FF55A17A000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A17A000
Size:	8192

Details

Name:	0000001F.00000000.412775227.000000007FE00000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE00000
Size:	4096

Details

Name:	00000019.00000002.418256552.0000000003270000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3270000
Size:	65536

Details

Name:	0000001B.00000002.427621288.0000000000380000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	380000
Size:	12288

Details

Name:	00000028.00000003.487085988.000002AC2DBA2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA2000
Size:	40960

Details

Name:	00000012.00000000.370588971.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000019.00000003.398856681.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	45056

Details

Name:	00000014.00000002.403738270.0000000000FCA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FCA000
Size:	4096

Details

Name:	0000001F.00000003.418197194.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002D.00000002.573776991.0000028B30230000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B30230000
Size:	16384

Details

Name:	00000015.00000002.398985860.00007FF57CE6B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CE6B000
Size:	8192

Details

Name:	00000012.00000000.370263315.0000024B7C970000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	00000014.00000003.402206764.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	0000002D.00000000.549043811.00007DF5FB102000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB102000
Size:	4096

Details

Name:	0000002D.00000002.575097641.00007FF5D93B1000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D93B1000
Size:	8192

Details

Name:	00000014.00000003.401865389.0000000003E2A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2A000
Size:	12288

Details

Name:	00000000.00000003.333361112.00000000072E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72E1000
Size:	8192

Details

Name:	0000001B.00000003.426745693.00000000004DA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DA000
Size:	12288

Details

Name:	00000012.00000000.370721716.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	00000006.00000003.512423827.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	0000001B.00000002.428107025.0000000000545000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	8192

Details

Name:	00000022.00000002.442345757.0000017AD1D90000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD1D90000
Size:	16384

Details

Name:	00000006.00000003.361004783.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.417468602.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000003.425701918.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	131072

Details

Name:	0000002A.00000002.577706898.00007FF5ED661000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED661000
Size:	4096

Details

Name:	00000006.00000003.360065927.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000002.438916961.00000000003C0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3C0000
Size:	102400

Details

Name:	0000001B.00000002.427427395.0000000000030000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	00000014.00000002.404968762.0000000003E6C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E6C000
Size:	8192

Details

Name:	0000001B.00000003.410103733.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000028.00000002.508209741.00007FF563977000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563977000
Size:	32768

Details

Name:	0000000A.00000002.366318803.00000000038C1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	38C1000
Size:	8192

Details

Name:	00000006.00000003.364197059.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000003.396543931.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000002.574525920.000000000127E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	8192

Details

Name:	0000002A.00000002.573275003.000000A944F8B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A944F8B000
Size:	20480

Details

Name:	0000000A.00000002.365946471.0000000000C0E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C0E000
Size:	8192

Details

Name:	00000019.00000003.398098771.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	45056

Details

Name:	00000019.00000003.395418413.000000000156E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	156E000
Size:	8192

Details

Name:	00000028.00000002.508791531.00007FF563DB0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DB0000
Size:	4096

Details

Name:	00000019.00000003.395609628.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000019.00000003.397188872.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	8192

Details

Name:	00000006.00000003.415462525.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	126976

Details

Name:	00000014.00000003.400006572.0000000003EC5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC5000
Size:	4096

Details

Name:	00000014.00000000.372469272.0000000000472000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000022.00000000.421376736.00007DF55B922000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B922000
Size:	4096

Details

Name:	0000000A.00000002.366325249.000000000499D000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	499D000
Size:	12288

Details

Name:	00000019.00000003.396492636.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000005.00000000.350738224.00000202D2310000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2310000
Size:	102400

Details

Name:	0000001F.00000002.438856689.0000000000380000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	380000
Size:	4096

Details

Name:	00000019.00000003.396552038.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000002.398251633.0000013E70E35000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13E70E35000
Size:	20480

Details

Name:	00000019.00000003.396318698.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001F.00000002.439490575.00000000010F0000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10F0000
Size:	65536

Details

Name:	00000006.00000003.353692889.0000000001356000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1356000
Size:	24576

Details

Name:	00000019.00000003.401160983.0000000005C10000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C10000
Size:	65536

Details

Name:	00000028.00000003.483767421.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	94208

Details

Name:	00000019.00000002.416029225.00000000014AD000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14AD000
Size:	4096

Details

Name:	00000014.00000003.395286277.0000000004C9E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C9E000
Size:	4096

Details

Name:	00000019.00000003.398044534.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000014.00000003.390182359.0000000004C01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C01000
Size:	217088

Details

Name:	00000026.00000002.465945312.0000024187D60000.00000004.00000020.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24187D60000
Size:	8192

Details

Name:	0000001F.00000003.425069874.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000003.425535242.00000000057AA000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57AA000
Size:	24576

Details

Name:	00000000.00000002.334116841.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	00000000.00000002.334102178.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000014.00000002.403745774.00000000013EF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13EF000
Size:	69632

Details

Name:	0000001F.00000003.416392153.00000000054B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54B0000
Size:	28672

Details

Name:	00000006.00000003.352643580.000000000139A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	139A000
Size:	12288

Details

Name:	00000004.00000003.346342646.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000006.00000003.358224731.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000012.00000000.394238106.0000024B7D202000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	0000000A.00000002.366190134.0000000002714000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2714000
Size:	24576

Details

Name:	00000006.00000003.448460705.0000000001378000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1378000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000002A.00000003.516733313.00000267CBEB0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBEB0000
Size:	4096

Details

Name:	0000001C.00000003.406978969.00000000056F4000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F4000
Size:	45056

Details

Name:	00000005.00000002.362462233.0000003D07F77000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D07F77000
Size:	36864

Details

Name:	00000028.00000002.507828857.000002AC2D910000.00000004.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2AC2D910000
Size:	8192

Details

Name:	0000001B.00000003.425775209.0000000000563000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	563000
Size:	36864

Details

Name:	0000001F.00000003.426075253.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	16384

Details

Name:	00000006.00000002.579930048.0000000005640000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5640000
Size:	65536

Details

Name:	0000001F.00000002.439314619.000000000108D000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	108D000
Size:	4096

Details

Name:	00000028.00000002.507735946.000002AC2D600000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D600000
Size:	12288

Details

Name:	00000004.00000003.357092319.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	0000001B.00000002.428808056.00000000031D0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31D0000
Size:	8192

Details

Name:	0000000F.00000002.370826666.0000000000FB4000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB4000
Size:	24576

Details

Name:	0000002D.00000002.575759377.00007FF5ED48A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED48A000
Size:	12288

Details

Name:	0000000F.00000002.370804154.0000000000FA4000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA4000
Size:	4096

Details

Name:	0000000A.00000002.366235311.000000000273B000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	273B000
Size:	4096

Details

Name:	0000000A.00000002.366151959.0000000002704000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2704000
Size:	4096

Details

Name:	0000000D.00000001.366610501.00000000003F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	0000000F.00000000.368783038.000000007F1E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E0000
Size:	4096

Details

Name:	0000001F.00000002.440846995.000000007FE00000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE00000
Size:	4096

Details

Name:	00000006.00000003.529905482.0000000006996000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6996000
Size:	32768

Details

Name:	0000001B.00000003.426630920.0000000000502000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	502000
Size:	12288

Details

Name:	0000001F.00000002.439706316.000000000136E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	136E000
Size:	8192

Details

Name:	00000019.00000003.397595109.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000006.00000003.497011040.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000019.00000002.415447492.0000000000BA0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BA0000
Size:	4096

Details

Name:	0000002A.00000002.578697227.00007FF5EDA69000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA69000
Size:	12288

Details

Name:	00000014.00000003.395182150.0000000003E85000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E85000
Size:	12288

Details

Name:	0000001B.00000003.427090735.000000000055E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55E000
Size:	8192

Details

Name:	00000000.00000003.330356043.0000000000F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9F000
Size:	8192

Details

Name:	0000002D.00000002.574249783.0000028B302F0000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	28B302F0000
Size:	4096

Details

Name:	0000001F.00000003.438278684.0000000005810000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5810000
Size:	20480

Details

Name:	00000014.00000002.405141865.0000000003EE0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3EE0000
Size:	8192

Details

Name:	00000014.00000003.401579159.0000000003E27000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E27000
Size:	57344

Details

Name:	00000014.00000002.403421042.0000000000497000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	497000
Size:	12288

Details

Name:	0000001B.00000003.427073338.0000000000555000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	555000
Size:	4096

Details

Name:	00000015.00000003.387932804.0000013E72A8A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A8A000
Size:	12288

Details

Name:	00000006.00000002.580772752.0000000005920000.00000040.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5920000
Size:	4096

Details

Name:	00000006.00000003.359483323.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000F.00000000.368809847.000000007F1F2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F2000
Size:	4096

Details

Name:	00000006.00000003.532794619.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000028.00000003.489396498.000002AC2DB1A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB1A000
Size:	4096

Details

Name:	00000012.00000000.394684788.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	0000000F.00000002.371101056.000000007F1E2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E2000
Size:	4096

Details

Name:	0000002A.00000002.577588897.00007FF5ED5E3000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED5E3000
Size:	4096

Details

Name:	00000028.00000002.508239648.00007FF563A64000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563A64000
Size:	8192

Details

Name:	00000004.00000002.360525020.0000000001270000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1270000
Size:	16384

Details

Name:	00000006.00000003.448571377.00000000013EC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13EC000
Size:	12288

Details

Name:	00000006.00000003.355837826.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000006.00000003.359887944.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000F.00000002.371081715.000000007F0E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E0000
Size:	20480

Details

Name:	00000004.00000002.360295425.00000000010F0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	10F0000
Size:	12288

Details

Name:	00000028.00000003.489313034.000002AC2DB91000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB91000
Size:	32768

Details

Name:	00000029.00000003.488345457.00000199BA126000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA126000
Size:	36864

Details

Name:	00000014.00000002.406500159.00000000FF630000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF630000
Size:	4096

Details

Name:	0000001B.00000003.426769335.00000000004D7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D7000
Size:	12288

Details

Name:	00000019.00000003.414203232.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000003.387919655.0000013E72A64000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A64000
Size:	24576

Details

Name:	00000028.00000002.507110579.000000FA936FE000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA936FE000
Size:	8192

Details

Name:	00000006.00000003.355185082.0000000005651000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	61440

Details

Name:	0000001F.00000003.421285778.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	12288

Details

Name:	00000022.00000002.442381496.0000017AD1E00000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E00000
Size:	73728

Details

Name:	0000000F.00000002.371039677.0000000002B00000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2B00000
Size:	4096

Details

Name:	00000006.00000003.353875484.00000000013A4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13A4000
Size:	24576

Details

Name:	00000019.00000003.398544751.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	00000006.00000000.351248560.000000000072A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	72A000
Size:	4096

Details

Name:	00000028.00000003.483577942.000002AC2DB84000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB84000
Size:	53248

Details

Name:	0000002A.00000002.578595635.00007FF5ED9EE000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9EE000
Size:	4096

Details

Name:	0000002A.00000002.574786715.00000267C6671000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6671000
Size:	4096

Details

Name:	0000002A.00000003.516674664.00000267CBE20000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBE20000
Size:	4096

Details

Name:	00000000.00000002.333726734.0000000000CDD000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	CDD000
Size:	16384

Details

Name:	00000006.00000003.493531486.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001F.00000003.414935853.00000000011BC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11BC000
Size:	8192

Details

Name:	0000001F.00000002.439581750.000000000113A000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	113A000
Size:	122880

Details

Name:	0000001F.00000003.420118284.0000000005770000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5770000
Size:	16384

Details

Name:	0000001F.00000003.417068009.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000019.00000003.399037875.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	00000012.00000002.573586710.0000024B7C970000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	0000002D.00000002.575172858.00007FF5ED037000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED037000
Size:	8192

Details

Name:	0000001F.00000002.439722228.00000000013BC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13BC000
Size:	16384

Details

Name:	0000001F.00000003.415512752.0000000004FAE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAE000
Size:	8192

Details

Name:	00000019.00000002.417635031.0000000001B60000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B60000
Size:	69632

Details

Name:	00000028.00000003.489454142.000002AC2DB82000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB82000
Size:	12288

Details

Name:	00000006.00000003.353916144.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.416785854.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000001F.00000002.439742098.00000000013CB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13CB000
Size:	32768

Details

Name:	0000001F.00000003.418816911.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	53248

Details

Name:	00000014.00000003.387572311.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000002A.00000002.575672149.00000267C7500000.00000004.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	267C7500000
Size:	4096

Details

Name:	00000012.00000000.370438218.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	16384

Details

Name:	00000014.00000003.402820173.0000000003DF3000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF3000
Size:	8192

Details

Name:	00000014.00000003.402675219.0000000003DF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF0000
Size:	24576

Details

Name:	00000012.00000000.394193496.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	00000004.00000003.357857031.00000000036E3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E3000
Size:	16384

Details

Name:	00000004.00000003.358000376.00000000036A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A0000
Size:	4096

Details

Name:	0000001F.00000003.417771358.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001B.00000002.427635241.0000000000385000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	385000
Size:	12288

Details

Name:	00000028.00000003.490357781.000002AC2DBB3000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB3000
Size:	212992

Details

Name:	00000028.00000003.493575922.000002AC2DBD2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBD2000
Size:	61440

Details

Name:	00000019.00000003.395284561.0000000001576000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1576000
Size:	28672

Details

Name:	00000006.00000003.359840786.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000002.580015104.0000000005680000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5680000
Size:	8192

Details

Name:	0000002A.00000000.515658374.00000267C6530000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6530000
Size:	102400

Details

Name:	00000006.00000003.356315212.0000000005740000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5740000
Size:	65536

Details

Name:	00000014.00000003.402379332.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	0000000F.00000002.371002181.00000000013E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E0000
Size:	69632

Details

Name:	00000015.00000002.400151473.00007FF57D3A9000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3A9000
Size:	12288

Details

Name:	00000015.00000003.387941612.0000013E72A63000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A63000
Size:	4096

Details

Name:	00000019.00000003.397050881.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000014.00000003.402186589.0000000003DDF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDF000
Size:	8192

Details

Name:	00000028.00000002.507772466.000002AC2D860000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D860000
Size:	8192

Details

Name:	0000001B.00000002.428987782.00000000FF280000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF280000
Size:	4096

Details

Name:	00000006.00000003.356900511.0000000005770000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5770000
Size:	24576

Details

Name:	0000002A.00000002.578073961.00007FF5ED843000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED843000
Size:	4096

Details

Name:	00000014.00000002.406466746.00000000FF530000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF530000
Size:	20480

Details

Name:	0000001F.00000003.417005711.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000006.00000002.579449622.0000000003F8C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F8C000
Size:	139264

Details

Name:	00000006.00000003.448447474.00000000069BD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69BD000
Size:	8192

Details

Name:	0000002D.00000002.575162441.00007FF5ECD2E000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ECD2E000
Size:	4096

Details

Name:	00000005.00000002.363436499.00007FF5C3177000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3177000
Size:	16384

Details

Name:	0000001C.00000002.408402421.000000007F830000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F830000
Size:	12288

Details

Name:	00000028.00000002.508747891.00007FF563D9D000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D9D000
Size:	4096

Details

Name:	0000001B.00000002.427440632.0000000000050000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	50000
Size:	102400

Details

Name:	0000002D.00000002.575043192.00007DF5FB120000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB120000
Size:	12288

Details

Name:	00000006.00000003.479100728.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	0000002D.00000002.574982335.00007DF5FB100000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB100000
Size:	4096

Details

Name:	0000001F.00000002.439798351.00000000013E5000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E5000
Size:	16384

Details

Name:	00000012.00000000.370431109.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	00000004.00000003.357831858.00000000036F9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	45056

Details

Name:	00000000.00000000.306947132.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000005.00000002.363053208.00007DF5D0ED0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0ED0000
Size:	12288

Details

Name:	00000019.00000002.417907143.000000000321D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	321D000
Size:	4096

Details

Name:	00000022.00000002.442333454.0000017AD1D80000.00000004.00000020.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17AD1D80000
Size:	8192

Details

Name:	00000004.00000003.350393910.0000000004630000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4630000
Size:	53248

Details

Name:	00000006.00000002.574662755.0000000001310000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1310000
Size:	36864

Details

Name:	00000004.00000003.357989919.00000000036B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B9000
Size:	8192

Details

Name:	00000026.00000002.466140077.0000024187E55000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E55000
Size:	106496

Details

Name:	00000004.00000000.332654921.00000000003F1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000019.00000003.395569681.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000006.00000003.365174320.00000000013D6000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13D6000
Size:	4096

Details

Name:	0000000F.00000002.370869217.000000000114F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	114F000
Size:	4096

Details

Name:	00000014.00000003.402053775.0000000003E2C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2C000
Size:	4096

Details

Name:	0000001F.00000003.415916747.00000000011D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	24576

Details

Name:	0000002A.00000003.516898354.00000267CBF40000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF40000
Size:	4096

Details

Name:	00000019.00000003.397547290.0000000005B70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	32768

Details

Name:	00000014.00000003.390064390.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000001F.00000002.440651636.0000000005A00000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5A00000
Size:	8192

Details

Name:	00000006.00000003.529873054.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000012.00000000.370582392.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	0000001F.00000002.439695363.000000000132F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	132F000
Size:	4096

Details

Name:	00000029.00000002.489082082.00007DF5611C0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611C0000
Size:	4096

Details

Name:	0000000A.00000002.366389429.000000007FDC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDC0000
Size:	20480

Details

Name:	00000028.00000002.507548603.000002AC2D2A2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2A2000
Size:	49152

Details

Name:	00000006.00000003.365682179.0000000006D00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D00000
Size:	12288

Details

Name:	00000028.00000003.488599324.000002AC2DB9B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB9B000
Size:	32768

Details

Name:	00000014.00000002.403536990.0000000000CB0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CB0000
Size:	102400

Details

Name:	0000002A.00000002.578341710.00007FF5ED987000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED987000
Size:	4096

Details

Name:	0000002D.00000002.575020320.00007DF5FB112000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB112000
Size:	4096

Details

Name:	0000001B.00000003.426523829.0000000000508000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	508000
Size:	12288

Details

Name:	00000006.00000000.351201938.0000000000720000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	720000
Size:	4096

Details

Name:	00000028.00000003.482317135.000002AC2DBA2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA2000
Size:	126976

Details

Name:	00000006.00000003.358316557.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000003.402601036.0000000003DEA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DEA000
Size:	4096

Details

Name:	00000029.00000003.488263268.00000199BA135000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA135000
Size:	28672

Details

Name:	00000019.00000003.397934351.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	53248

Details

Name:	00000004.00000002.360843914.00000000036F9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	45056

Details

Name:	0000001F.00000003.420268821.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	0000001C.00000002.408363188.000000007F812000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F812000
Size:	4096

Details

Name:	00000004.00000003.358914672.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	00000014.00000002.403593833.0000000000D0A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D0A000
Size:	24576

Details

Name:	00000012.00000000.370596482.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	0000000D.00000002.366810604.000000000049B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Details

Name:	00000006.00000003.365546076.0000000006BC0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC0000
Size:	4096

Details

Name:	00000019.00000003.401259861.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	49152

Details

Name:	00000006.00000003.356193166.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.352894166.00000000011F4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11F4000
Size:	4096

Details

Name:	0000001B.00000002.428832296.00000000031D4000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31D4000
Size:	8192

Details

Name:	0000002A.00000002.577427671.00007FF5ED217000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED217000
Size:	28672

Details

Name:	0000002D.00000002.574579161.0000028B30AE0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B30AE0000
Size:	4096

Details

Name:	00000006.00000003.360081451.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.420179059.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	131072

Details

Name:	00000019.00000002.420523301.0000000005B50000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B50000
Size:	4096

Details

Name:	00000014.00000003.393997360.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000006.00000003.537201371.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000012.00000002.573368792.0000024B7C830000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	0000000F.00000000.368793169.000000007F1E2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E2000
Size:	4096

Details

Name:	00000006.00000003.355096749.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.353596580.00000000013A4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13A4000
Size:	24576

Details

Name:	0000001F.00000002.439273222.0000000001073000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1073000
Size:	4096

Details

Name:	00000014.00000003.402407262.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	0000002A.00000002.573851624.00000267C6520000.00000004.00000040.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	267C6520000
Size:	4096

Details

Name:	00000004.00000002.359958124.00000000008DA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DA000
Size:	24576

Details

Name:	0000001B.00000003.427031107.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	00000026.00000002.465613480.000000F4516FE000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F4516FE000
Size:	8192

Details

Name:	00000012.00000000.370250853.0000024B7C870000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	00000000.00000000.306922078.0000000000D01000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D01000
Size:	36864

Details

Name:	00000026.00000002.466426911.00007DF465D30000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF465D30000
Size:	20480

Details

Name:	00000006.00000002.574061712.0000000001180000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1180000
Size:	4096

Details

Name:	0000001C.00000002.408386574.000000007F822000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F822000
Size:	4096

Details

Name:	00000005.00000002.362608687.00000202D2360000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	202D2360000
Size:	8192

Details

Name:	00000014.00000002.403522807.0000000000C90000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	C90000
Size:	4096

Details

Name:	00000014.00000003.387309746.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000001C.00000002.407920808.00000000015E0000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	15E0000
Size:	8192

Details

Name:	0000001F.00000003.425388592.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001F.00000003.415361122.00000000011C3000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C3000
Size:	16384

Details

Name:	0000001F.00000003.424910924.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	45056

Details

Name:	00000006.00000003.552112042.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000000.00000003.328872232.0000000000F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9F000
Size:	200704

Details

Name:	00000006.00000003.355899427.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	65536

Details

Name:	0000001F.00000003.417953979.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000002.415951932.000000000149D000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	149D000
Size:	4096

Details

Name:	00000005.00000002.363241437.00007FF5C305F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C305F000
Size:	8192

Details

Name:	00000006.00000003.355429783.0000000001367000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1367000
Size:	20480

Details

Name:	0000001F.00000003.418735186.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	36864

Details

Name:	00000004.00000003.358258715.00000000036CC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CC000
Size:	24576

Details

Name:	0000000A.00000002.366046143.0000000000E10000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	E10000
Size:	8192

Details

Name:	00000019.00000002.418392292.000000000339D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	339D000
Size:	12288

Details

Name:	00000019.00000002.421066123.000000007F082000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F082000
Size:	4096

Details

Name:	00000000.00000003.329402401.0000000007274000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7274000
Size:	8192

Details

Name:	00000006.00000002.573294865.000000000072A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	72A000
Size:	4096

Details

Name:	00000012.00000000.394272944.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	0000001F.00000002.439014665.0000000000430000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	430000
Size:	4096

Details

Name:	0000001C.00000002.408297812.0000000004351000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4351000
Size:	8192

Details

Name:	00000019.00000002.420642234.0000000005BB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	36864

Details

Name:	00000019.00000003.395650502.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000012.00000000.370547550.00007FF5B1977000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1977000
Size:	4096

Details

Name:	00000014.00000002.406550748.00000000FF632000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF632000
Size:	4096

Details

Name:	00000004.00000000.332971632.00000000FF220000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF220000
Size:	4096

Details

Name:	00000015.00000002.398510461.0000013E72A66000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A66000
Size:	8192

Details

Name:	00000028.00000002.508083241.00007DF571B00000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B00000
Size:	4096

Details

Name:	0000000F.00000002.370883198.0000000001190000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1190000
Size:	8192

Details

Name:	00000026.00000002.466737912.00007FF559F86000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559F86000
Size:	16384

Details

Name:	00000006.00000003.474574253.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000006.00000002.574735446.000000000131A000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	131A000
Size:	110592

Details

Name:	00000015.00000003.396875585.0000013E72A70000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A70000
Size:	20480

Details

Name:	0000001F.00000002.440350864.0000000005560000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5560000
Size:	4096

Details

Name:	0000001C.00000000.404645419.000000007F820000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F820000
Size:	4096

Details

Name:	0000001F.00000003.420500248.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	65536

Details

Name:	0000001F.00000003.418487014.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	86016

Details

Name:	0000001B.00000002.427722766.00000000003F0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	0000001F.00000003.414960843.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	8192

Details

Name:	00000012.00000002.574762368.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	0000001F.00000003.418681162.0000000005530000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	16384

Details

Name:	00000006.00000003.460013328.00000000013E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E0000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000A.00000002.366458996.000000007FEE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	12288

Details

Name:	00000019.00000002.420534729.0000000005B60000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5B60000
Size:	8192

Details

Name:	00000006.00000002.580148658.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	4096

Details

Name:	0000001F.00000002.440587703.000000000597E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	597E000
Size:	8192

Details

Name:	00000006.00000002.573499711.00000000007D0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	4096

Details

Name:	0000001F.00000003.414640698.00000000011B6000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11B6000
Size:	32768

Details

Name:	00000019.00000003.414276197.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	65536

Details

Name:	00000019.00000003.395677771.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002A.00000002.577720918.00007FF5ED689000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED689000
Size:	4096

Details

Name:	00000000.00000002.333581332.0000000000570000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	570000
Size:	8192

Details

Name:	00000004.00000003.358069009.00000000036DA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36DA000
Size:	36864

Details

Name:	0000001B.00000003.407571221.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000012.00000000.370616296.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000006.00000003.354166859.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	24576

Details

Name:	00000014.00000003.402019412.0000000003E11000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E11000
Size:	12288

Details

Name:	0000002D.00000002.573456079.000000FFB747B000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB747B000
Size:	20480

Details

Name:	0000001B.00000003.411497996.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000004.00000003.357754762.00000000036F9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	45056

Details

Name:	00000004.00000003.357275699.00000000036C1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C1000
Size:	368640

Details

Name:	00000019.00000002.419237765.0000000005A90000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5A90000
Size:	733184

Details

Name:	00000006.00000003.359813686.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.472552248.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000004.00000003.357690921.00000000036EE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EE000
Size:	24576

Details

Name:	00000000.00000002.333589727.00000000006DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6DE000
Size:	12288

Details

Name:	0000000D.00000000.366356025.00000000003F1000.00000020.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000014.00000002.403184067.00000000003F1000.00000020.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	0000002A.00000002.577783302.00007FF5ED757000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED757000
Size:	12288

Details

Name:	0000000A.00000002.366140511.00000000026F0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26F0000
Size:	4096

Details

Name:	00000005.00000002.363228578.00007FF5C303B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C303B000
Size:	8192

Details

Name:	00000000.00000003.330163756.0000000000F6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6F000
Size:	8192

Details

Name:	00000015.00000002.399264659.00007FF57D119000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D119000
Size:	4096

Details

Name:	00000019.00000003.397335747.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	0000001B.00000002.428264858.00000000005C7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7000
Size:	4096

Details

Name:	00000006.00000003.518255842.00000000013E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E0000
Size:	20480

Details

Name:	0000001B.00000003.412998992.00000000005C6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	8192

Details

Name:	00000015.00000002.397874701.0000013E70B30000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70B30000
Size:	8192

Details

Name:	0000000F.00000002.370633266.0000000000BA0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BA0000
Size:	4096

Details

Name:	00000026.00000002.467139924.00007FF55A153000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A153000
Size:	24576

Details

Name:	0000001B.00000003.426216812.0000000000539000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	539000
Size:	45056

Details

Name:	0000001B.00000002.428524442.0000000000CC0000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CC0000
Size:	24576

Details

Name:	0000001F.00000000.412810281.000000007FE10000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE10000
Size:	12288

Details

Name:	0000001B.00000003.426963134.00000000004D6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D6000
Size:	4096

Details

Name:	00000029.00000002.488929641.00000199BA240000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199BA240000
Size:	16384

Details

Name:	0000001B.00000003.426047326.0000000000539000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	539000
Size:	45056

Details

Name:	0000001F.00000002.440371323.00000000056B0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	56B0000
Size:	733184

Details

Name:	00000014.00000003.390649102.0000000004E00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E00000
Size:	860160

Details

Name:	00000005.00000002.363262190.00007FF5C30A5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C30A5000
Size:	20480

Details

Name:	00000019.00000003.397865942.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	24576

Details

Name:	00000026.00000002.467314231.00007FF55A201000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A201000
Size:	16384

Details

Name:	00000006.00000002.581709640.0000000006E7D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E7D000
Size:	12288

Details

Name:	00000014.00000003.401344827.0000000003E56000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E56000
Size:	12288

Details

Name:	00000015.00000002.397607078.0000001DB84F9000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB84F9000
Size:	28672

Details

Name:	0000001F.00000002.438988551.0000000000423000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	423000
Size:	8192

Details

Name:	00000006.00000003.544045099.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	0000001C.00000002.407344053.0000000000EE0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EE0000
Size:	102400

Details

Name:	00000022.00000002.442503329.0000017AD1E70000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E70000
Size:	57344

Details

Name:	00000000.00000002.333854459.00000000011D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	4096

Details

Name:	00000019.00000003.413929682.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000004.00000003.349873323.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	0000001B.00000003.426231556.0000000000525000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	525000
Size:	8192

Details

Name:	0000001C.00000002.408262707.0000000003340000.00000040.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	3340000
Size:	4096

Details

Name:	0000000A.00000001.363641975.0000000000690000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	690000
Size:	4096

Details

Name:	0000001F.00000002.439436853.00000000010C0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10C0000
Size:	4096

Details

Name:	00000019.00000003.398436861.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	53248

Details

Name:	00000006.00000003.365201613.00000000013D1000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13D1000
Size:	4096

Details

Name:	00000015.00000003.396852138.0000013E72A65000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A65000
Size:	65536

Details

Name:	00000006.00000003.361032316.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000000.00000002.333612788.00000000008D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8D0000
Size:	8192

Details

Name:	00000006.00000003.356580535.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001B.00000002.428763205.0000000001C40000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C40000
Size:	4096

Details

Name:	00000015.00000002.400133164.00007FF57D3A2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3A2000
Size:	12288

Details

Name:	00000006.00000002.581156955.000000000655D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	655D000
Size:	12288

Details

Name:	00000006.00000003.365410734.0000000006BE0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BE0000
Size:	12288

Details

Name:	00000012.00000000.394260036.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000006.00000002.574594593.0000000001302000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1302000
Size:	4096

Details

Name:	00000006.00000003.360182625.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	00000000.00000002.333858545.00000000011F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11F0000
Size:	24576

Details

Name:	0000001B.00000002.427526106.0000000000250000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	250000
Size:	16384

Details

Name:	0000001C.00000000.404527198.0000000000EA0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA0000
Size:	4096

Details

Name:	00000019.00000002.415938484.0000000001494000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1494000
Size:	4096

Details

Name:	00000005.00000002.363287831.00007FF5C30BC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C30BC000
Size:	4096

Details

Name:	0000002A.00000002.575338081.00000267C6DB1000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6DB1000
Size:	4096

Details

Name:	00000004.00000000.332961297.00000000FF212000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF212000
Size:	4096

Details

Name:	0000002D.00000002.574629234.0000028B30E90000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30E90000
Size:	45056

Details

Name:	0000001F.00000003.426161116.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	36864

Details

Name:	00000014.00000002.404691789.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	00000004.00000002.361056779.0000000003740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3740000
Size:	20480

Details

Name:	0000001F.00000003.415316699.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	24576

Details

Name:	00000019.00000003.414237829.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000006.00000003.449887969.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000026.00000002.466237062.0000024187F02000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187F02000
Size:	12288

Details

Name:	00000022.00000002.443177719.00007FF54DBD3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBD3000
Size:	12288

Details

Name:	00000006.00000003.358980074.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001C.00000000.404575271.0000000000EE0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	EE0000
Size:	102400

Details

Name:	00000004.00000003.358226376.00000000036AE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36AE000
Size:	4096

Details

Name:	00000029.00000002.489311215.00007FF553476000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553476000
Size:	16384

Details

Name:	0000001F.00000002.440799532.000000007FDF0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	4096

Details

Name:	0000001F.00000002.440248560.00000000054C0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54C0000
Size:	4096

Details

Name:	00000014.00000003.399966022.0000000003DE5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE5000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000019.00000000.393949602.000000007F090000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F090000
Size:	4096

Details

Name:	00000014.00000002.403378811.0000000000480000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	480000
Size:	4096

Details

Name:	00000012.00000000.370526888.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	0000002D.00000000.549058769.00007DF5FB110000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB110000
Size:	4096

Details

Name:	0000002A.00000002.577525939.00007FF5ED234000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED234000
Size:	8192

Details

Name:	0000001F.00000003.417545034.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000029.00000002.488531958.0000000257B8E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257B8E000
Size:	8192

Details

Name:	00000006.00000003.355257027.0000000005650000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5650000
Size:	49152

Details

Name:	0000001C.00000002.407734810.0000000001560000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1560000
Size:	8192

Details

Name:	00000000.00000002.333742425.0000000000D01000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D01000
Size:	36864

Details

Name:	00000004.00000002.359729741.0000000000472000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000006.00000003.448542631.00000000013DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DE000
Size:	4096

Details

Name:	00000006.00000003.484044262.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000004.00000002.360121429.00000000009F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9F0000
Size:	16384

Details

Name:	00000006.00000003.535941166.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000000.00000003.333369265.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	8192

Details

Name:	0000002A.00000003.516476964.00000267CBD40000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBD40000
Size:	8192

Details

Name:	0000001F.00000003.420829956.0000000005790000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	65536

Details

Name:	00000015.00000002.398192450.0000013E70C52000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70C52000
Size:	4096

Details

Name:	0000001F.00000003.425894131.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000004.00000003.358810807.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	4096

Details

Name:	00000015.00000003.396817063.0000013E72A75000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A75000
Size:	36864

Details

Name:	00000029.00000002.488886129.00000199BA151000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA151000
Size:	4096

Details

Name:	0000001F.00000002.440706484.000000000626E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	626E000
Size:	8192

Details

Name:	00000029.00000002.489267294.00007FF55346F000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55346F000
Size:	12288

Details

Name:	00000004.00000003.345866408.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000028.00000003.484017647.000002AC2DB82000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB82000
Size:	12288

Details

Name:	00000012.00000000.393995314.0000024B7C870000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C870000
Size:	4096

Details

Name:	00000000.00000003.330391895.0000000000F6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6B000
Size:	4096

Details

Name:	00000005.00000003.362144495.00000202D2481000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2481000
Size:	40960

Details

Name:	0000001F.00000003.414382659.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000002A.00000002.576983365.00000267CC030000.00000004.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	267CC030000
Size:	4096

Details

Name:	00000012.00000002.574774554.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000019.00000003.398531862.0000000005BA0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	16384

Details

Name:	00000004.00000003.358107165.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	0000000F.00000003.370199987.0000000005050000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5050000
Size:	12288

Details

Name:	00000026.00000002.466722500.00007FF559E85000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559E85000
Size:	8192

Details

Name:	00000019.00000002.417772177.0000000003200000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3200000
Size:	28672

Details

Name:	00000014.00000003.400754013.0000000003E5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5E000
Size:	8192

Details

Name:	00000004.00000003.349065727.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000026.00000002.466937543.00007FF55A085000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A085000
Size:	4096

Details

Name:	00000006.00000003.358908151.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.353725229.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	0000002A.00000000.515782309.00007DF5FB710000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB710000
Size:	12288

Details

Name:	00000006.00000003.355371879.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	8192

Details

Name:	0000002A.00000003.516629418.00000267CBD30000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBD30000
Size:	4096

Details

Name:	0000002D.00000002.575397919.00007FF5ED3B6000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3B6000
Size:	16384

Details

Name:	00000015.00000003.396939768.0000013E72A68000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A68000
Size:	28672

Details

Name:	00000029.00000000.476819925.00007FF553561000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553561000
Size:	16384

Details

Name:	0000001F.00000003.420074721.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000003.414676151.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002D.00000002.575442612.00007FF5ED3C3000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3C3000
Size:	12288

Details

Name:	00000028.00000002.508073446.00007DF571AF2000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571AF2000
Size:	4096

Details

Name:	00000004.00000003.349666946.0000000003749000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3749000
Size:	249856

Details

Name:	0000001F.00000002.439072026.000000000063A000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	63A000
Size:	24576

Details

Name:	00000000.00000002.333630453.00000000008E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8E7000
Size:	4096

Details

Name:	00000000.00000003.329191389.00000000072E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72E1000
Size:	8192

Details

Name:	00000014.00000002.405118265.0000000003ED0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3ED0000
Size:	12288

Details

Name:	00000029.00000002.489252480.00007FF55346D000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55346D000
Size:	4096

Details

Name:	00000000.00000003.330450984.0000000000FE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE3000
Size:	65536

Details

Name:	0000001B.00000002.428275200.00000000005D0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5D0000
Size:	8192

Details

Name:	00000015.00000002.400262969.00007FF57D3CE000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3CE000
Size:	8192

Details

Name:	00000026.00000003.465237949.0000024187E50000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E50000
Size:	126976

Details

Name:	00000014.00000003.395151974.0000000003E88000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E88000
Size:	4096

Details

Name:	0000001B.00000003.426598995.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	0000000A.00000002.365955356.0000000000C10000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C10000
Size:	36864

Details

Name:	00000005.00000002.362646310.00000202D2400000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2400000
Size:	4096

Details

Name:	00000028.00000003.485746258.000002AC2DBAD000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBAD000
Size:	73728

Details

Name:	00000028.00000002.508137662.00007FF563621000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563621000
Size:	20480

Details

Name:	00000006.00000003.353042116.0000000001363000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1363000
Size:	12288

Details

Name:	00000004.00000003.358013947.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	0000002A.00000002.578610573.00007FF5EDA07000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA07000
Size:	8192

Details

Name:	00000014.00000003.402262425.0000000003E08000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E08000
Size:	12288

Details

Name:	00000022.00000002.442662560.0000017AD2450000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD2450000
Size:	4096

Details

Name:	00000019.00000003.398166016.0000000005BA0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	61440

Details

Name:	00000006.00000003.550508121.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000028.00000002.506985921.000000FA9317E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9317E000
Size:	8192

Details

Name:	00000006.00000003.365367735.0000000006820000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6820000
Size:	20480

Details

Name:	00000012.00000000.370492263.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000014.00000003.400024991.0000000003DE4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE4000
Size:	4096

Details

Name:	00000012.00000000.370629958.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000005.00000000.350791603.00007DF5D0EC2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EC2000
Size:	4096

Details

Name:	00000004.00000003.357641223.000000000371E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	371E000
Size:	8192

Details

Name:	00000019.00000003.395761870.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	16384

Details

Name:	00000004.00000001.333163917.00000000003F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000022.00000002.442468415.0000017AD1E52000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E52000
Size:	4096

Details

Name:	00000028.00000002.508474203.00007FF563C9F000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C9F000
Size:	8192

Details

Name:	00000012.00000000.393985812.0000024B7C860000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	0000001F.00000002.439283680.0000000001074000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1074000
Size:	4096

Details

Name:	00000028.00000003.491848254.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	12288

Details

Name:	0000000A.00000003.365332303.0000000004EC0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EC0000
Size:	12288

Details

Name:	0000001F.00000003.415985937.00000000011C8000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	12288

Details

Name:	00000012.00000002.574646604.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000006.00000003.459851362.0000000006995000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6995000
Size:	32768

Details

Name:	00000000.00000003.333233889.0000000000F6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6E000
Size:	4096

Details

Name:	00000028.00000003.485896659.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	147456

Details

Name:	00000006.00000002.580173130.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	57344

Details

Name:	00000026.00000000.451791406.0000024187D10000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24187D10000
Size:	102400

Details

Name:	00000016.00000002.391111895.00000000FF9C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C0000
Size:	4096

Details

Name:	0000001F.00000003.425559835.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	12288

Details

Name:	00000028.00000003.480491083.000002AC2DB90000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB90000
Size:	53248

Details

Name:	00000019.00000002.418151120.000000000324A000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	324A000
Size:	24576

Details

Name:	00000029.00000002.489602844.00007FF553544000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553544000
Size:	20480

Details

Name:	0000002A.00000002.575545698.00000267C6F02000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F02000
Size:	32768

Details

Name:	00000006.00000003.518207481.00000000013BA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13BA000
Size:	143360

Details

Name:	00000019.00000003.400193445.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	8192

Details

Name:	00000028.00000003.477804176.000002AC2D900000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D900000
Size:	4096

Details

Name:	00000000.00000002.333818894.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	8192

Details

Name:	00000014.00000003.401823964.0000000003E2A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2A000
Size:	12288

Details

Name:	00000029.00000002.488717997.00000199BA0E0000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA0E0000
Size:	4096

Details

Name:	0000002A.00000003.526148886.00000267C6F59000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F59000
Size:	4096

Details

Name:	00000015.00000003.397200611.0000013E70BB6000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BB6000
Size:	176128

Details

Name:	0000001F.00000003.417248815.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002A.00000002.576084486.00000267CBAD0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBAD0000
Size:	4096

Details

Name:	0000001B.00000002.427737187.00000000003F1000.00000020.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000014.00000003.387603001.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000000.00000002.333909112.0000000002CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CC0000
Size:	4096

Details

Name:	00000015.00000002.399191923.00007FF57D097000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D097000
Size:	12288

Details

Name:	00000014.00000003.402154331.0000000003E0E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E0E000
Size:	12288

Details

Name:	0000001B.00000003.425967380.0000000000544000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	544000
Size:	12288

Details

Name:	0000001C.00000002.407599474.00000000014CE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14CE000
Size:	8192

Details

Name:	00000015.00000002.398687894.00007DF488F00000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF488F00000
Size:	20480

Details

Name:	00000028.00000002.508041423.000002AC2E000000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E000000
Size:	8192

Details

Name:	00000022.00000002.442951378.00007FF54DABF000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DABF000
Size:	8192

Details

Name:	0000000A.00000002.366402273.000000007FEC2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEC2000
Size:	4096

Details

Name:	00000012.00000000.394663361.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000022.00000002.443236621.00007FF54DBE7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBE7000
Size:	49152

Details

Name:	00000012.00000000.394199886.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	0000002A.00000002.578774180.00007FF5EDA81000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA81000
Size:	32768

Details

Name:	0000001C.00000002.407313356.0000000000EAA000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EAA000
Size:	4096

Details

Name:	00000000.00000002.333749711.0000000000E0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000006.00000003.356024316.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	16384

Details

Name:	0000001F.00000003.416739072.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000014.00000002.406401903.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	4096

Details

Name:	00000026.00000002.466043552.0000024187E29000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E29000
Size:	12288

Details

Name:	0000002A.00000002.576763687.00000267CBCDF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCDF000
Size:	12288

Details

Name:	00000019.00000003.400634300.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	36864

Details

Name:	00000004.00000003.357924219.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	135168

Details

Name:	0000002A.00000002.578252576.00007FF5ED95E000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED95E000
Size:	8192

Details

Name:	00000022.00000002.443451372.00007FF54DC9A000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC9A000
Size:	12288

Details

Name:	00000000.00000003.307673906.0000000000F3C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F3C000
Size:	110592

Details

Name:	00000014.00000003.390083327.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000006.00000003.480440834.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000015.00000002.399678601.00007FF57D2DF000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2DF000
Size:	12288

Details

Name:	0000001F.00000003.420697804.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	65536

Details

Name:	00000000.00000002.333919161.0000000002D34000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D34000
Size:	12288

Details

Name:	00000006.00000003.359007371.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000002.405197432.0000000003F14000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3F14000
Size:	8192

Details

Name:	00000006.00000003.365144543.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	24576

Details

Name:	00000006.00000003.353328775.0000000001354000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1354000
Size:	40960

Details

Name:	00000006.00000002.574612183.0000000001306000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1306000
Size:	8192

Details

Name:	00000006.00000002.573892020.000000000111E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	111E000
Size:	8192

Details

Name:	00000004.00000003.349303286.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000014.00000003.390562728.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000000.00000002.333665160.0000000000AF0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AF0000
Size:	16384

Details

Name:	00000019.00000003.396587800.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000002.397710815.0000001DB8BF8000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8BF8000
Size:	32768

Details

Name:	00000000.00000003.329410185.00000000071E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71E2000
Size:	200704

Details

Name:	00000006.00000003.365311850.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	32768

Details

Name:	00000019.00000003.401666593.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	36864

Details

Name:	00000015.00000002.399644596.00007FF57D2DD000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2DD000
Size:	4096

Details

Name:	00000000.00000003.329798520.0000000000FA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FA1000
Size:	192512

Details

Name:	00000000.00000000.306856982.0000000000CA1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	CA1000
Size:	200704

Details

Name:	00000006.00000002.579962241.0000000005650000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5650000
Size:	12288

Details

Name:	00000014.00000003.400999894.0000000003E52000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E52000
Size:	4096

Details

Name:	00000014.00000003.401895866.0000000003DE7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE7000
Size:	8192

Details

Name:	00000004.00000003.357805785.00000000036E7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E7000
Size:	28672

Details

Name:	0000001C.00000002.407655758.00000000014D5000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14D5000
Size:	8192

Details

Name:	00000019.00000000.393856282.00000000007F2000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000028.00000002.509145053.00007FF563E8A000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E8A000
Size:	4096

Details

Name:	00000028.00000002.507061974.000000FA93577000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA93577000
Size:	36864

Details

Name:	0000000F.00000002.370654597.0000000000D10000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D10000
Size:	4096

Details

Name:	0000001F.00000003.421043283.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	24576

Details

Name:	00000006.00000002.579883715.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	57344

Details

Name:	0000001F.00000002.439460529.00000000010E0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10E0000
Size:	40960

Details

Name:	0000001F.00000002.439530070.0000000001115000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1115000
Size:	12288

Details

Name:	00000014.00000003.401963215.0000000003E1A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E1A000
Size:	32768

Details

Name:	0000001B.00000002.427944627.000000000049B000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000002A.00000002.577682728.00007FF5ED630000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED630000
Size:	4096

Details

Name:	00000004.00000003.349954357.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000006.00000003.352945476.0000000001366000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1366000
Size:	20480

Details

Name:	00000019.00000003.400279509.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	4096

Details

Name:	0000001F.00000003.415343528.00000000011C8000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	12288

Details

Name:	0000001F.00000002.440748803.000000007FC90000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FC90000
Size:	4096

Details

Name:	0000001B.00000002.427879284.0000000000480000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	480000
Size:	4096

Details

Name:	0000001F.00000003.425911239.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001C.00000002.408147581.0000000001AF0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AF0000
Size:	69632

Details

Name:	0000002A.00000002.578050177.00007FF5ED835000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED835000
Size:	4096

Details

Name:	0000002A.00000002.578418839.00007FF5ED9A3000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9A3000
Size:	28672

Details

Name:	0000002D.00000002.573503082.000000FFB74FE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB74FE000
Size:	8192

Details

Name:	00000015.00000003.396890808.0000013E72A6F000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A6F000
Size:	4096

Details

Name:	0000001B.00000003.425640381.000000000055E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55E000
Size:	8192

Details

Name:	00000012.00000000.394576630.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	00000006.00000002.581874884.000000007FE90000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE90000
Size:	20480

Details

Name:	00000004.00000003.349848783.0000000003748000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3748000
Size:	217088

Details

Name:	0000001F.00000003.415532607.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000006.00000003.355615276.000000000136D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	136D000
Size:	45056

Details

Name:	00000015.00000002.399922021.00007FF57D31B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D31B000
Size:	12288

Details

Name:	00000006.00000002.575508466.00000000013E0000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E0000
Size:	20480

Details

Name:	00000005.00000002.362938902.00000202D2A50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2A50000
Size:	4096

Details

Name:	00000014.00000003.402832412.0000000003DF4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF4000
Size:	4096

Details

Name:	00000006.00000003.356917693.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	65536

Details

Name:	0000000A.00000002.366200876.000000000271D000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	271D000
Size:	8192

Details

Name:	00000029.00000002.488628584.000000025807C000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25807C000
Size:	16384

Details

Name:	00000012.00000002.574499246.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	00000000.00000003.333382919.0000000000FE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE4000
Size:	61440

Details

Name:	00000015.00000002.399695579.00007FF57D2E3000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2E3000
Size:	28672

Details

Name:	0000002A.00000002.577695834.00007FF5ED63F000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED63F000
Size:	4096

Details

Name:	0000001F.00000003.438411648.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000003.423285188.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	12288

Details

Name:	00000016.00000002.390994522.0000000000480000.00000008.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	0000002D.00000002.573293709.000000FFB6F4D000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB6F4D000
Size:	12288

Details

Name:	00000014.00000003.394188797.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	0000002A.00000002.573827324.00000267C6510000.00000004.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	267C6510000
Size:	4096

Details

Name:	0000001F.00000002.440111988.0000000003E81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E81000
Size:	28672

Details

Name:	00000019.00000003.395616200.0000000001564000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1564000
Size:	49152

Details

Name:	0000001F.00000003.420959764.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000016.00000000.390641302.0000000000E70000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	E70000
Size:	102400

Details

Name:	0000001F.00000003.438188306.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000004.00000003.358411003.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	00000029.00000002.488568637.0000000257EFA000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257EFA000
Size:	24576

Details

Name:	0000002A.00000002.575927672.00000267C76F0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C76F0000
Size:	65536

Details

Name:	00000026.00000002.467263588.00007FF55A1EA000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1EA000
Size:	12288

Details

Name:	00000015.00000002.398224880.0000013E70E30000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13E70E30000
Size:	16384

Details

Name:	00000026.00000002.467280035.00007FF55A1F1000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1F1000
Size:	32768

Details

Name:	0000002A.00000002.574042806.00000267C6580000.00000004.00000020.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	267C6580000
Size:	12288

Details

Name:	00000015.00000002.398854992.00007FF57CC32000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CC32000
Size:	4096

Details

Name:	00000028.00000002.508173081.00007FF5637FB000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5637FB000
Size:	4096

Details

Name:	00000005.00000002.363174110.00007FF5C2FD6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2FD6000
Size:	16384

Details

Name:	00000012.00000002.574105296.0000024B7D202000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7D202000
Size:	4096

Details

Name:	00000014.00000002.403339198.0000000000472000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Details

Name:	00000005.00000002.363526292.00007FF5C31CA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C31CA000
Size:	8192

Details

Name:	00000019.00000002.414992988.00000000007F2000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2000
Size:	28672

Details

Name:	00000012.00000000.394603078.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	0000001C.00000002.407267176.0000000000EA0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA0000
Size:	4096

Details

Name:	00000014.00000002.403675651.0000000000DF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DF0000
Size:	4096

Details

Name:	00000006.00000003.365852644.00000000013DB000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DB000
Size:	4096

Details

Name:	0000002A.00000002.576010640.00000267C7710000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C7710000
Size:	65536

Details

Name:	00000019.00000003.400013652.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	12288

Details

Name:	00000015.00000002.399615814.00007FF57D2D6000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2D6000
Size:	4096

Details

Name:	00000004.00000002.360810244.0000000003690000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3690000
Size:	4096

Details

Name:	00000000.00000002.334036094.0000000004DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DB0000
Size:	40960

Details

Name:	0000002A.00000003.526108876.00000267C6F18000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F18000
Size:	4096

Details

Name:	00000028.00000003.489279390.000002AC2DB87000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB87000
Size:	32768

Details

Name:	0000001C.00000002.408198092.000000000318E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	318E000
Size:	8192

Details

Name:	0000001F.00000003.420878778.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	65536

Details

Name:	00000019.00000003.394974508.000000000549F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	549F000
Size:	8192

Details

Name:	00000014.00000003.402084176.0000000003DEE000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DEE000
Size:	4096

Details

Name:	0000001F.00000000.412658634.0000000000382000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	382000
Size:	28672

Details

Name:	00000016.00000000.390620091.000000000049B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000029.00000002.488761926.00000199BA126000.00000004.00000020.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	199BA126000
Size:	36864

Details

Name:	0000002A.00000002.577866693.00007FF5ED7A0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7A0000
Size:	4096

Details

Name:	0000002A.00000002.577666217.00007FF5ED62A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED62A000
Size:	20480

Details

Name:	00000028.00000002.507355148.000002AC2D213000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D213000
Size:	86016

Details

Name:	0000001F.00000003.417417281.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002D.00000002.575464524.00007FF5ED3EB000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3EB000
Size:	12288

Details

Name:	00000019.00000002.418035319.000000000322C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	322C000
Size:	12288

Details

Name:	00000006.00000002.574106375.0000000001190000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1190000
Size:	4096

Details

Name:	00000019.00000003.395475577.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	180224

Details

Name:	00000014.00000002.405081502.0000000003E87000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E87000
Size:	4096

Details

Name:	0000002A.00000003.516588778.00000267CBC01000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC01000
Size:	4096

Details

Name:	00000006.00000003.355472768.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	0000001F.00000003.417996040.0000000005500000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5500000
Size:	20480

Details

Name:	00000000.00000002.333732087.0000000000CE4000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	CE4000
Size:	16384

Details

Name:	0000001F.00000002.440681083.000000000616E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	616E000
Size:	8192

Details

Name:	0000001B.00000003.410690586.0000000000587000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	65536

Details

Name:	00000026.00000002.466906727.00007FF55A07B000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A07B000
Size:	8192

Details

Name:	00000006.00000001.352065524.0000000000720000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	720000
Size:	4096

Details

Name:	0000002A.00000002.573621063.000000A94597E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A94597E000
Size:	8192

Details

Name:	0000001B.00000003.415129090.0000000000587000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	12288

Details

Name:	00000014.00000003.401074520.0000000003E47000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E47000
Size:	16384

Details

Name:	00000004.00000002.360975007.000000000371E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	371E000
Size:	8192

Details

Name:	0000001C.00000002.407844560.00000000015B0000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	15B0000
Size:	8192

Details

Name:	0000002A.00000002.578398083.00007FF5ED99F000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED99F000
Size:	12288

Details

Name:	00000019.00000003.399431291.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	0000000A.00000000.363583997.000000007FEC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEC0000
Size:	4096

Details

Name:	00000006.00000003.359774896.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	12288

Details

Name:	00000015.00000000.386669497.00007DF58B050000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B050000
Size:	12288

Details

Name:	00000006.00000002.580792896.0000000005930000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5930000
Size:	733184

Details

Name:	00000004.00000003.358142074.00000000036DB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36DB000
Size:	12288

Details

Name:	00000016.00000000.390708661.00000000FF9D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D0000
Size:	4096

Details

Name:	00000006.00000003.354567515.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000002A.00000002.577946826.00007FF5ED7E1000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7E1000
Size:	4096

Details

Name:	00000012.00000002.574213016.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	00000006.00000003.365843264.00000000013D6000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13D6000
Size:	16384

Details

Name:	00000006.00000003.359441783.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	24576

Details

Name:	00000004.00000003.358703222.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	4096

Details

Name:	00000006.00000003.359928753.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	0000002A.00000002.578648865.00007FF5EDA0D000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA0D000
Size:	12288

Details

Name:	00000019.00000003.395580867.0000000001576000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1576000
Size:	8192

Details

Name:	0000002A.00000002.576920539.00000267CBF00000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF00000
Size:	4096

Details

Name:	00000004.00000003.352159103.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000004.00000003.342406889.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000014.00000002.404566395.0000000003DD0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD0000
Size:	4096

Details

Name:	00000006.00000003.448509741.00000000013BA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13BA000
Size:	143360

Details

Name:	0000002A.00000002.577112498.00007DF5FB6F2000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB6F2000
Size:	4096

Details

Name:	0000001F.00000003.418551694.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	0000001B.00000003.407424420.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000002A.00000002.576700706.00000267CBCBB000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCBB000
Size:	114688

Details

Name:	00000000.00000002.333822520.0000000000FE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE4000
Size:	61440

Details

Name:	00000028.00000003.491927528.000002AC2DBA1000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA1000
Size:	32768

Details

Name:	00000012.00000000.394647972.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	0000001F.00000003.418596784.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	65536

Details

Name:	00000019.00000002.418473085.0000000003450000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3450000
Size:	8192

Details

Name:	0000002D.00000002.575361386.00007FF5ED3AF000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3AF000
Size:	12288

Details

Name:	00000006.00000003.355723208.0000000005730000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5730000
Size:	32768

Details

Name:	00000026.00000002.466067350.0000024187E2D000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E2D000
Size:	57344

Details

Name:	00000019.00000003.398887499.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000019.00000003.400123773.0000000005BF0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BF0000
Size:	12288

Details

Name:	00000000.00000002.333606346.00000000008C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8C6000
Size:	36864

Details

Name:	00000000.00000003.307377947.0000000002E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000014.00000003.387684815.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000000.00000002.334107761.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	00000006.00000003.365863523.00000000013DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DE000
Size:	4096

Details

Name:	00000029.00000000.476724549.00007DF5611D2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611D2000
Size:	4096

Details

Name:	00000026.00000002.466374699.0000024188450000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24188450000
Size:	4096

Details

Name:	00000006.00000003.354622649.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.480830048.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000022.00000002.442911761.00007FF54DA61000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA61000
Size:	8192

Details

Name:	00000028.00000003.492008345.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	106496

Details

Name:	0000001F.00000003.425800897.00000000011D7000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D7000
Size:	8192

Details

Name:	0000001C.00000000.404665328.000000007F822000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F822000
Size:	4096

Details

Name:	00000019.00000003.397688767.0000000005B70000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	16384

Details

Name:	00000029.00000002.489539054.00007FF5534DD000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5534DD000
Size:	8192

Details

Name:	00000026.00000002.466658460.00007FF559991000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559991000
Size:	20480

Details

Name:	00000000.00000002.333850121.00000000011B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11B0000
Size:	12288

Details

Name:	00000022.00000002.443157807.00007FF54DBD0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBD0000
Size:	4096

Details

Name:	0000002A.00000002.576058333.00000267C7A60000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C7A60000
Size:	4096

Details

Name:	0000001F.00000002.439788774.00000000013E0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E0000
Size:	16384

Details

Name:	00000006.00000003.358289042.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	8192

Details

Name:	0000002D.00000002.575425903.00007FF5ED3C0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3C0000
Size:	4096

Details

Name:	00000019.00000003.395327733.0000000001581000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1581000
Size:	20480

Details

Name:	00000019.00000003.399335096.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	00000006.00000003.489733952.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000026.00000002.465665829.000000F45197E000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F45197E000
Size:	8192

Details

Name:	0000001B.00000003.427110986.0000000000570000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	570000
Size:	12288

Details

Name:	00000028.00000003.483616048.000002AC2DB95000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB95000
Size:	32768

Details

Name:	00000026.00000002.466860260.00007FF55A055000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A055000
Size:	20480

Details

Name:	00000015.00000003.396905317.0000013E72A71000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A71000
Size:	16384

Details

Name:	00000012.00000000.394181624.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000006.00000003.364397584.00000000057C5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C5000
Size:	8192

Details

Name:	0000001F.00000003.417097133.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000022.00000002.442410293.0000017AD1E13000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E13000
Size:	86016

Details

Name:	00000016.00000002.391159201.00000000FF9D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D2000
Size:	4096

Details

Name:	00000029.00000002.489292333.00007FF553473000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553473000
Size:	8192

Details

Name:	0000001C.00000002.408116927.00000000018F0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18F0000
Size:	36864

Details

Name:	00000014.00000003.402121309.0000000003E0B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E0B000
Size:	24576

Details

Name:	0000001F.00000003.416648263.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	32768

Details

Name:	0000001F.00000002.439102832.0000000000750000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	750000
Size:	4096

Details

Name:	00000006.00000003.359242822.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.365216604.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	16384

Details

Name:	00000014.00000003.401537413.0000000003E45000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E45000
Size:	8192

Details

Name:	0000000A.00000002.366008644.0000000000C46000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C46000
Size:	176128

Details

Name:	00000006.00000002.573949958.0000000001160000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1160000
Size:	8192

Details

Name:	00000012.00000000.394488709.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	0000001B.00000003.421389873.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000015.00000002.399057790.00007FF57CF6F000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CF6F000
Size:	8192

Details

Name:	00000006.00000003.365501842.0000000006BC0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BC0000
Size:	65536

Details

Name:	00000019.00000003.398790009.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	49152

Details

Name:	00000019.00000002.420698841.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	4096

Details

Name:	00000006.00000003.358343104.0000000005880000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5880000
Size:	12288

Details

Name:	00000004.00000003.358280592.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	00000022.00000002.442256884.0000017AD1D20000.00000004.00000040.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17AD1D20000
Size:	4096

Details

Name:	00000022.00000002.443081179.00007FF54DBA7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBA7000
Size:	4096

Details

Name:	00000004.00000003.358972191.0000000001277000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	1277000
Size:	12288

Details

Name:	00000019.00000000.393891519.0000000000A30000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	102400

Details

Name:	00000019.00000002.415202696.00000000008B0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8B0000
Size:	4096

Details

Name:	0000001F.00000003.417807100.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000019.00000003.400478891.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000001F.00000003.424989536.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000002.439541586.000000000111A000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	111A000
Size:	24576

Details

Name:	00000006.00000003.357940212.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000004.00000003.358450450.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	00000015.00000002.398822708.00007FF57CBF1000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CBF1000
Size:	4096

Details

Name:	0000002A.00000002.578006857.00007FF5ED816000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED816000
Size:	16384

Details

Name:	0000001B.00000002.428697239.00000000018C0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18C0000
Size:	36864

Details

Name:	0000001C.00000002.407627223.00000000014D0000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14D0000
Size:	16384

Details

Name:	00000006.00000002.579589692.0000000005091000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5091000
Size:	172032

Details

Name:	00000019.00000002.415369940.0000000000B88000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B88000
Size:	32768

Details

Name:	00000029.00000000.476707755.00007DF5611D0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611D0000
Size:	4096

Details

Name:	0000001C.00000003.406837431.0000000003323000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3323000
Size:	53248

Details

Name:	00000005.00000002.363400106.00007FF5C3163000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3163000
Size:	28672

Details

Name:	00000022.00000002.442186117.0000004E02677000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E02677000
Size:	36864

Details

Name:	00000014.00000003.402653617.0000000003DEA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DEA000
Size:	4096

Details

Name:	0000000F.00000002.371095890.000000007F1E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1E0000
Size:	4096

Details

Name:	00000004.00000003.357981275.00000000036B5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B5000
Size:	8192

Details

Name:	00000006.00000003.548728953.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	0000001C.00000000.404630825.000000007F812000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F812000
Size:	4096

Details

Name:	0000002A.00000002.577762896.00007FF5ED695000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED695000
Size:	20480

Details

Name:	00000015.00000002.399302124.00007FF57D11E000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D11E000
Size:	4096

Details

Name:	0000001F.00000003.415762527.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	00000019.00000003.395703104.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000028.00000003.488988112.000002AC2DB93000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB93000
Size:	16384

Details

Name:	0000000F.00000002.371034355.0000000002A20000.00000040.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2A20000
Size:	4096

Details

Name:	0000001F.00000003.416324710.0000000002E65000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E65000
Size:	8192

Details

Name:	00000006.00000002.576537988.0000000002EA0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EA0000
Size:	16384

Details

Name:	00000029.00000000.476683782.00007DF5611C2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611C2000
Size:	4096

Details

Name:	00000006.00000003.364218314.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	28672

Details

Name:	0000002A.00000002.575200579.00000267C68D0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C68D0000
Size:	4096

Details

Name:	0000001F.00000003.438344634.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000003.400490804.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000006.00000003.353263565.0000000001362000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1362000
Size:	16384

Details

Name:	0000001F.00000002.439599378.0000000001162000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1162000
Size:	98304

Details

Name:	00000012.00000002.573481285.0000024B7C860000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	00000006.00000002.581351010.0000000006830000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6830000
Size:	36864

Details

Name:	0000001B.00000003.414255262.000000000058B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58B000
Size:	8192

Details

Name:	0000000D.00000000.366532317.0000000000E50000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	E50000
Size:	102400

Details

Name:	00000000.00000003.329779698.00000000071E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71E1000
Size:	4096

Details

Name:	00000004.00000003.358171280.00000000036D2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36D2000
Size:	8192

Details

Name:	0000001B.00000003.413019338.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000000F.00000002.370649446.0000000000D0E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D0E000
Size:	8192

Details

Name:	00000006.00000003.512298579.00000000013BA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13BA000
Size:	139264

Details

Name:	00000019.00000002.419007316.00000000058B0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	58B0000
Size:	4096

Details

Name:	0000000A.00000002.365933710.00000000009D1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D1000
Size:	4096

Details

Name:	0000000A.00000002.366255091.0000000002760000.00000040.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2760000
Size:	4096

Details

Name:	00000004.00000003.357077791.00000000036A9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A9000
Size:	8192

Details

Name:	0000001C.00000003.406825361.0000000003320000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3320000
Size:	8192

Details

Name:	00000019.00000002.416663300.000000000154E000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	0000001B.00000002.427929259.0000000000497000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	497000
Size:	12288

Details

Name:	0000001F.00000003.438263800.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000022.00000002.442856659.00007FF54D797000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D797000
Size:	32768

Details

Name:	00000006.00000003.357127068.0000000001373000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1373000
Size:	40960

Details

Name:	00000006.00000003.357026414.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	24576

Details

Name:	0000000A.00000003.365289079.0000000004EE0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE0000
Size:	65536

Details

Name:	0000000F.00000002.370786654.0000000000F90000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F90000
Size:	4096

Details

Name:	00000006.00000002.580198626.00000000057B0000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	57B0000
Size:	65536

Details

Name:	00000028.00000003.506619424.000002AC2D24E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D24E000
Size:	24576

Details

Name:	00000019.00000003.396387415.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000002A.00000002.575595150.00000267C6F13000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F13000
Size:	20480

Details

Name:	00000004.00000003.358534948.00000000036B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B0000
Size:	20480

Details

Name:	00000019.00000003.395218780.000000000156E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	156E000
Size:	32768

Details

Name:	0000001F.00000003.415863013.00000000011C7000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C7000
Size:	24576

Details

Name:	00000026.00000002.466552627.00007DF567E60000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E60000
Size:	4096

Details

Name:	00000014.00000003.400718804.0000000003E61000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E61000
Size:	65536

Details

Name:	00000004.00000003.358585356.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	0000001C.00000003.406873419.0000000005720000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5720000
Size:	12288

Details

Name:	00000005.00000002.363206310.00007FF5C3020000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3020000
Size:	4096

Details

Name:	0000002D.00000002.575145160.00007FF5ECD29000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ECD29000
Size:	12288

Details

Name:	00000004.00000002.359755606.0000000000480000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	480000
Size:	4096

Details

Name:	0000002D.00000002.575250636.00007FF5ED2B7000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED2B7000
Size:	4096

Details

Name:	0000001B.00000002.428023547.00000000004F1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F1000
Size:	8192

Details

Name:	0000002A.00000002.578456381.00007FF5ED9B3000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9B3000
Size:	12288

Details

Name:	00000019.00000002.415152931.00000000008AA000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8AA000
Size:	4096

Details

Name:	00000012.00000000.370645613.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	00000006.00000003.357629206.000000000136E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	136E000
Size:	28672

Details

Name:	0000002A.00000002.575624562.00000267C7101000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C7101000
Size:	4096

Details

Name:	00000015.00000002.399544328.00007FF57D27B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D27B000
Size:	4096

Details

Name:	0000002A.00000002.574524892.00000267C663D000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C663D000
Size:	106496

Details

Name:	00000004.00000003.351571545.0000000004542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4542000
Size:	12288

Details

Name:	00000006.00000003.365801922.0000000005092000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5092000
Size:	184320

Details

Name:	00000006.00000003.512232016.0000000001378000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1378000
Size:	208896

Details

Name:	00000006.00000003.360125812.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000012.00000002.573656408.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	00000028.00000003.490535738.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	425984

Details

Name:	00000028.00000002.507402650.000002AC2D23C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D23C000
Size:	65536

Details

Name:	0000001F.00000002.440299259.0000000005500000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5500000
Size:	4096

Details

Name:	00000028.00000003.493510819.000002AC2DBB2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB2000
Size:	32768

Details

Name:	00000019.00000003.396672159.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000014.00000002.406613144.00000000FF650000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF650000
Size:	12288

Details

Name:	0000001C.00000003.406949143.00000000056F0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	12288

Details

Name:	00000006.00000003.518192059.00000000013AE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13AE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000006.00000003.491875224.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000028.00000003.479825136.000002AC2DB78000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB78000
Size:	8192

Details

Name:	0000001F.00000003.419828214.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	65536

Details

Name:	0000001B.00000002.427481151.00000000000B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B0000
Size:	16384

Details

Name:	00000019.00000002.417118408.000000000176C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	176C000
Size:	16384

Details

Name:	0000001B.00000003.407193963.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000028.00000003.492815396.000002AC2DB9D000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB9D000
Size:	12288

Details

Name:	00000006.00000003.359508139.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.418883811.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000019.00000002.415774815.0000000001330000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1330000
Size:	16384

Details

Name:	00000006.00000003.359290821.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000004.00000003.358857504.00000000036A8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A8000
Size:	4096

Details

Name:	0000002A.00000002.577651940.00007FF5ED5FE000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED5FE000
Size:	12288

Details

Name:	00000006.00000002.581272401.000000000681E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	681E000
Size:	8192

Details

Name:	00000006.00000003.358890985.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.358778326.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	65536

Details

Name:	00000015.00000002.398283017.0000013E70E40000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70E40000
Size:	36864

Details

Name:	00000000.00000001.307030456.0000000000CA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	CA0000
Size:	4096

Details

Name:	00000028.00000002.507527610.000002AC2D28B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D28B000
Size:	81920

Details

Name:	0000001B.00000003.407479852.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000004.00000002.361470877.00000000FF212000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF212000
Size:	4096

Details

Name:	00000005.00000002.363590861.00007FF5C3251000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3251000
Size:	16384

Details

Name:	00000028.00000002.507758793.000002AC2D780000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D780000
Size:	4096

Details

Name:	00000006.00000003.352919931.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000002.440555761.0000000005830000.00000040.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5830000
Size:	4096

Details

Name:	00000019.00000003.396608177.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000014.00000003.402710662.0000000003DF9000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF9000
Size:	8192

Details

Name:	0000002A.00000002.577570722.00007FF5ED40C000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED40C000
Size:	4096

Details

Name:	00000000.00000003.333394678.0000000000F2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F2A000
Size:	126976

Details

Name:	00000004.00000003.349895312.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	430080

Details

Name:	00000019.00000003.395746510.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	28672

Details

Name:	0000001F.00000002.440309448.0000000005510000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5510000
Size:	4096

Details

Name:	0000001F.00000003.425955341.00000000057F0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57F0000
Size:	12288

Details

Name:	0000001B.00000002.428177240.0000000000571000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	571000
Size:	8192

Details

Name:	00000014.00000003.402294985.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	00000006.00000002.576178857.0000000002CB7000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2CB7000
Size:	4096

Details

Name:	00000019.00000003.399867798.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	8192

Details

Name:	00000012.00000000.394046548.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	00000028.00000003.488680884.000002AC2DBB7000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB7000
Size:	65536

Details

Name:	00000028.00000003.482437534.000002AC2DB61000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB61000
Size:	61440

Details

Name:	00000006.00000002.579656624.00000000050BD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50BD000
Size:	8192

Details

Name:	00000006.00000002.581106612.00000000063DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	63DE000
Size:	8192

Details

Name:	00000006.00000003.352505536.00000000050B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B0000
Size:	4096

Details

Name:	00000026.00000002.466829085.00007FF559FEB000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559FEB000
Size:	8192

Details

Name:	0000002A.00000002.577988067.00007FF5ED7F5000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7F5000
Size:	4096

Details

Name:	00000019.00000002.418189447.0000000003253000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3253000
Size:	12288

Details

Name:	0000001B.00000001.396766755.00000000003F0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000022.00000002.442086199.0000004E0227E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E0227E000
Size:	8192

Details

Name:	00000022.00000000.421334477.00007DF55B912000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B912000
Size:	4096

Details

Name:	0000000D.00000002.366781987.0000000000472000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000006.00000003.359732607.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	0000001B.00000003.412852394.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000006.00000002.575570648.00000000013EC000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13EC000
Size:	12288

Details

Name:	00000000.00000002.334078146.00000000072E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	72E1000
Size:	8192

Details

Name:	00000006.00000002.576478980.0000000002E97000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E97000
Size:	16384

Details

Name:	0000001C.00000002.408226814.00000000031FD000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31FD000
Size:	8192

Details

Name:	0000000F.00000002.370988269.00000000011E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11E0000
Size:	40960

Details

Name:	00000026.00000000.451857896.00007DF567E72000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E72000
Size:	4096

Details

Name:	0000002D.00000002.573400406.000000FFB7379000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB7379000
Size:	28672

Details

Name:	00000019.00000003.400078054.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	57344

Details

Name:	00000004.00000003.346414757.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000004.00000002.361147863.00000000037A4000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	37A4000
Size:	8192

Details

Name:	0000002D.00000002.573800174.0000028B30280000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	28B30280000
Size:	24576

Details

Name:	00000006.00000003.403102706.0000000006996000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6996000
Size:	36864

Details

Name:	0000001F.00000003.416582739.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	36864

Details

Name:	00000028.00000003.482349978.000002AC2E020000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E020000
Size:	122880

Details

Name:	00000006.00000003.354109430.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	16384

Details

Name:	00000004.00000003.358626471.00000000036B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B0000
Size:	20480

Details

Name:	0000001B.00000003.426305082.0000000000514000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	514000
Size:	57344

Details

Name:	00000000.00000000.306938600.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	0000001F.00000003.419933269.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	53248

Details

Name:	0000001B.00000003.426989867.00000000004F3000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F3000
Size:	8192

Details

Name:	00000006.00000002.579245866.0000000003485000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3485000
Size:	4096

Details

Name:	00000006.00000003.352513195.00000000011F4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11F4000
Size:	4096

Details

Name:	00000006.00000003.355031861.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000022.00000002.443413149.00007FF54DC89000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC89000
Size:	12288

Details

Name:	00000019.00000002.417334657.000000000193F000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	193F000
Size:	4096

Details

Name:	00000014.00000003.395160644.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000028.00000002.509096007.00007FF563E7A000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E7A000
Size:	12288

Details

Name:	00000028.00000002.509170988.00007FF563E90000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E90000
Size:	20480

Details

Name:	00000006.00000002.574289656.00000000011D4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11D4000
Size:	4096

Details

Name:	00000000.00000002.333795441.0000000000F4A000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F4A000
Size:	4096

Details

Name:	00000005.00000002.363559101.00007FF5C3234000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3234000
Size:	20480

Details

Name:	00000006.00000002.579269149.0000000003EE1000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EE1000
Size:	28672

Details

Name:	00000006.00000003.364933026.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	16384

Details

Name:	00000006.00000003.448413524.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	4096

Details

Name:	0000001B.00000002.428163705.000000000056E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	00000006.00000003.547334898.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000006.00000003.358128594.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	12288

Details

Name:	00000000.00000002.334051287.0000000004FEE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FEE000
Size:	8192

Details

Name:	00000006.00000003.357865008.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	4096

Details

Name:	00000006.00000003.353608309.0000000001354000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1354000
Size:	8192

Details

Name:	00000019.00000003.396995228.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001C.00000002.408278578.0000000003351000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3351000
Size:	36864

Details

Name:	00000006.00000003.356450913.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	53248

Details

Name:	00000026.00000002.465677413.000000F451A77000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F451A77000
Size:	36864

Details

Name:	00000015.00000003.397185277.0000013E70C52000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70C52000
Size:	4096

Details

Name:	00000006.00000003.365189678.00000000013D8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13D8000
Size:	8192

Details

Name:	00000019.00000003.396952932.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000029.00000003.488176818.00000199BA121000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA121000
Size:	110592

Details

Name:	0000000F.00000003.370159272.0000000002AB0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB0000
Size:	8192

Details

Name:	0000001F.00000002.439520527.0000000001110000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1110000
Size:	16384

Details

Name:	00000006.00000003.512179202.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000019.00000003.395855551.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000012.00000000.370705730.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	00000006.00000003.360976300.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.512334879.00000000013E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E0000
Size:	20480

Details

Name:	00000006.00000003.353565018.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000006.00000003.359791840.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	0000002D.00000002.573760097.0000028B30210000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30210000
Size:	4096

Details

Name:	00000015.00000003.396995889.0000013E72A66000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A66000
Size:	8192

Details

Name:	0000001F.00000003.418309502.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	8192

Details

Name:	00000000.00000002.333621922.00000000008DD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DD000
Size:	4096

Details

Name:	00000004.00000003.351588018.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000006.00000003.358831253.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	4096

Details

Name:	0000001F.00000003.415598196.00000000011D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	16384

Details

Name:	00000014.00000003.402343939.0000000003E06000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E06000
Size:	8192

Details

Name:	00000014.00000003.394752602.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	0000001B.00000000.396618207.000000000049B000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Details

Name:	00000000.00000003.307948243.0000000000F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9D000
Size:	16384

Details

Name:	00000029.00000002.488789387.00000199BA130000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA130000
Size:	20480

Details

Name:	00000028.00000003.487005582.000002AC2DB91000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB91000
Size:	32768

Details

Name:	0000000F.00000002.371106099.000000007F1F0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F0000
Size:	4096

Details

Name:	00000000.00000002.333760824.0000000000F00000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F00000
Size:	28672

Details

Name:	00000019.00000003.414389502.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000019.00000003.399723649.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	00000006.00000002.574223591.00000000011C0000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11C0000
Size:	16384

Details

Name:	00000019.00000003.396044884.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	36864

Details

Name:	0000001F.00000003.425359970.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.386565206.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	00000014.00000002.404479851.0000000002770000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2770000
Size:	12288

Details

Name:	00000014.00000003.390485855.0000000004C81000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C81000
Size:	372736

Details

Name:	0000001B.00000000.396587647.0000000000472000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
OS version to string mapping found (often used in BOTs)	Stealing of Sensitive Information
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000012.00000000.370288369.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	00000005.00000002.363536217.00007FF5C31CD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C31CD000
Size:	8192

Details

Name:	00000019.00000003.401460362.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	16384

Details

Name:	0000001F.00000003.417576816.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001B.00000002.428786403.0000000003060000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3060000
Size:	4096

Details

Name:	00000019.00000000.393940373.000000007F082000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F082000
Size:	4096

Details

Name:	00000028.00000002.507320392.000002AC2D1E0000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D1E0000
Size:	4096

Details

Name:	00000006.00000003.364999570.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	49152

Details

Name:	00000004.00000003.349374992.0000000003758000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3758000
Size:	65536

Details

Name:	00000014.00000002.404315296.000000000219D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	219D000
Size:	12288

Details

Name:	00000028.00000002.507427111.000002AC2D250000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D250000
Size:	16384

Details

Name:	00000028.00000003.485849683.000002AC2DBA4000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA4000
Size:	294912

Details

Name:	00000019.00000002.416489192.0000000001512000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1512000
Size:	106496

Details

Name:	0000001B.00000002.427701509.00000000003B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3B0000
Size:	8192

Details

Name:	00000014.00000003.401747940.0000000003E2F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2F000
Size:	24576

Details

Name:	00000006.00000003.361077559.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000026.00000002.465840020.0000024187D10000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24187D10000
Size:	102400

Details

Name:	00000028.00000002.508496475.00007FF563CA7000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563CA7000
Size:	4096

Details

Name:	00000006.00000003.358007023.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000F.00000002.371067120.0000000004D0E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D0E000
Size:	8192

Details

Name:	00000012.00000002.574973281.00007FF5B1A81000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A81000
Size:	16384

Details

Name:	00000029.00000003.488359769.00000199BA14A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14A000
Size:	8192

Details

Name:	0000000F.00000003.370304868.0000000002AD0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AD0000
Size:	16384

Details

Name:	00000012.00000002.573552868.0000024B7C890000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	00000006.00000002.579748181.0000000005570000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5570000
Size:	4096

Details

Name:	00000014.00000003.399675923.0000000003DE4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE4000
Size:	659456

Details

Name:	00000004.00000003.346542074.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000000A.00000002.365852166.0000000000740000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	740000
Size:	4096

Details

Name:	00000014.00000002.404359236.00000000025A0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A0000
Size:	69632

Details

Name:	0000000A.00000002.365895666.00000000007E0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7E0000
Size:	4096

Details

Name:	0000001B.00000003.410155146.00000000005A6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A6000
Size:	73728

Details

Name:	00000026.00000002.467167174.00007FF55A177000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A177000
Size:	8192

Details

Name:	0000001F.00000003.420806211.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	40960

Details

Name:	00000006.00000003.357558714.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	57344

Details

Name:	0000001F.00000003.417598098.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000026.00000002.466894332.00007FF55A06C000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A06C000
Size:	4096

Details

Name:	0000001F.00000003.423225529.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	8192

Details

Name:	00000006.00000003.357187287.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	8192

Details

Name:	00000004.00000002.360793921.0000000002270000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2270000
Size:	4096

Details

Name:	00000019.00000002.415460972.0000000000BC0000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	BC0000
Size:	4096

Details

Name:	0000001B.00000002.427540947.0000000000260000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	260000
Size:	4096

Details

Name:	00000022.00000002.443066256.00007FF54DB35000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB35000
Size:	4096

Details

Name:	00000019.00000003.399147633.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	4096

Details

Name:	0000001F.00000003.419045190.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	65536

Details

Name:	0000000F.00000003.370246682.0000000002AD0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AD0000
Size:	12288

Details

Name:	00000028.00000002.507194893.000002AC2D070000.00000004.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2AC2D070000
Size:	4096

Details

Name:	0000000F.00000002.370470971.00000000007F2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000019.00000003.398945605.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000028.00000002.508248208.00007FF563A67000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563A67000
Size:	4096

Details

Name:	00000006.00000003.359903909.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000015.00000002.400023674.00007FF57D336000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D336000
Size:	12288

Details

Name:	00000012.00000000.370537852.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	00000000.00000003.329389048.0000000007243000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7243000
Size:	4096

Details

Name:	00000006.00000002.576513738.0000000002E9D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9D000
Size:	4096

Details

Name:	00000019.00000003.398933374.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000012.00000000.394022898.0000024B7C970000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C970000
Size:	16384

Details

Name:	0000001F.00000003.438220663.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000004.00000002.360391738.00000000011AE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11AE000
Size:	8192

Details

Name:	00000004.00000002.361505163.00000000FF230000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF230000
Size:	12288

Details

Name:	0000000A.00000002.365923272.00000000009C5000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9C5000
Size:	4096

Details

Name:	00000006.00000002.575749760.0000000001710000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1710000
Size:	69632

Details

Name:	0000001F.00000003.420382503.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002A.00000003.516925015.00000267CBF40000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF40000
Size:	4096

Details

Name:	00000019.00000002.418085662.0000000003240000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3240000
Size:	16384

Details

Name:	00000015.00000002.397976083.0000013E70BBA000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BBA000
Size:	32768

Details

Name:	00000028.00000003.490418008.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	425984

Details

Name:	00000014.00000003.387524269.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000006.00000002.579848625.0000000005610000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5610000
Size:	65536

Details

Name:	00000012.00000002.574224052.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000006.00000002.576158891.0000000002CB2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB2000
Size:	4096

Details

Name:	0000002A.00000002.576959256.00000267CBF20000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF20000
Size:	4096

Details

Name:	00000006.00000003.355399341.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	4096

Details

Name:	0000002D.00000003.549595383.0000028B302CE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28B302CE000
Size:	4096

Details

Name:	00000028.00000002.507306018.000002AC2D1C0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D1C0000
Size:	16384

Details

Name:	00000019.00000003.396271488.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000000A.00000002.366365119.0000000004E01000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E01000
Size:	45056

Details

Name:	0000002D.00000002.573424802.000000FFB73FE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB73FE000
Size:	8192

Details

Name:	0000002D.00000000.549083475.00007DF5FB112000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB112000
Size:	4096

Details

Name:	00000000.00000002.334112137.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	00000028.00000002.508286151.00007FF563B57000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563B57000
Size:	12288

Details

Name:	00000006.00000002.579720326.0000000005560000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5560000
Size:	4096

Details

Name:	00000019.00000003.396651319.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001C.00000002.407867569.00000000015C0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0000
Size:	65536

Details

Name:	0000002A.00000002.576538703.00000267CBC7B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC7B000
Size:	118784

Details

Name:	00000006.00000002.574560735.0000000001300000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1300000
Size:	4096

Details

Name:	00000028.00000002.506973471.000000FA930FE000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA930FE000
Size:	8192

Details

Name:	0000001C.00000002.407526683.00000000010C7000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10C7000
Size:	4096

Details

Name:	00000004.00000002.360351997.0000000001160000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1160000
Size:	16384

Details

Name:	00000028.00000002.508628597.00007FF563D6A000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D6A000
Size:	8192

Details

Name:	00000015.00000003.387897538.0000013E72A6A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A6A000
Size:	81920

Details

Name:	00000006.00000003.519400047.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000A.00000002.365834293.000000000072D000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	12288

Details

Name:	00000006.00000003.364879269.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	49152

Details

Name:	0000001C.00000002.408213719.00000000031B0000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31B0000
Size:	4096

Details

Name:	00000016.00000002.391143030.00000000FF9D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D0000
Size:	4096

Details

Name:	0000000D.00000000.366565322.00000000FF9D2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D2000
Size:	4096

Details

Name:	00000000.00000002.334045943.0000000004FAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000003.398372739.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000028.00000000.475127936.00007DF571AF0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571AF0000
Size:	4096

Details

Name:	00000012.00000002.574041636.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	0000001B.00000003.426667269.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	0000000A.00000002.366440335.000000007FED0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	00000004.00000003.357574373.00000000036F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F6000
Size:	69632

Details

Name:	0000000A.00000002.365863153.0000000000790000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	790000
Size:	20480

Details

Name:	00000004.00000003.358647449.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	4096

Details

Name:	00000006.00000003.477418461.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	00000019.00000003.395638017.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000006.00000003.406869817.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	00000005.00000002.363550844.00007FF5C3229000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3229000
Size:	12288

Details

Name:	00000004.00000003.357414863.0000000003733000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3733000
Size:	49152

Details

Name:	00000006.00000002.580257737.00000000058AE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	58AE000
Size:	8192

Details

Name:	00000014.00000003.400433181.0000000003F4A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F4A000
Size:	20480

Details

Name:	00000014.00000003.387168878.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	0000001F.00000003.423059752.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	65536

Details

Name:	00000004.00000003.358727910.00000000036B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B9000
Size:	8192

Details

Name:	00000006.00000003.352799402.0000000001354000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1354000
Size:	139264

Details

Name:	0000001C.00000002.407884720.00000000015D1000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D1000
Size:	40960

Details

Name:	00000015.00000002.398888104.00007FF57CE02000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CE02000
Size:	4096

Details

Name:	00000028.00000002.507290391.000002AC2D0E0000.00000004.00000020.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2AC2D0E0000
Size:	12288

Details

Name:	00000019.00000000.393968854.000000007F0A0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0A0000
Size:	12288

Details

Name:	0000001B.00000003.425522128.0000000000560000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	560000
Size:	49152

Details

Name:	0000001F.00000001.413729659.0000000000380000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	380000
Size:	4096

Details

Name:	00000000.00000003.333204615.0000000000F4B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F4B000
Size:	8192

Details

Name:	0000001F.00000003.414830181.00000000011CE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	20480

Details

Name:	00000015.00000003.397257931.0000013E70BC2000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BC2000
Size:	126976

Details

Name:	00000029.00000000.476603573.00000199B9FD0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	199B9FD0000
Size:	102400

Details

Name:	00000005.00000002.362862730.00000202D2508000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2508000
Size:	24576

Details

Name:	0000002A.00000002.578267769.00007FF5ED961000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED961000
Size:	4096

Details

Name:	0000002D.00000002.574414675.0000028B30545000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28B30545000
Size:	12288

Details

Name:	0000002A.00000002.575370146.00000267C6DD0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6DD0000
Size:	8192

Details

Name:	00000019.00000003.399107459.0000000005B91000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B91000
Size:	57344

Details

Name:	00000006.00000002.581123005.00000000064DD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	64DD000
Size:	12288

Details

Name:	00000012.00000000.370242262.0000024B7C860000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C860000
Size:	12288

Details

Name:	0000000A.00000002.365914519.00000000009C1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9C1000
Size:	8192

Details

Name:	00000006.00000003.515448019.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000019.00000003.395627996.0000000001567000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1567000
Size:	36864

Details

Name:	00000028.00000003.485661756.000002AC2DBA3000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA3000
Size:	90112

Details

Name:	0000001F.00000003.417694177.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000006.00000003.361122375.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000002.576336727.0000000002E7D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E7D000
Size:	12288

Details

Name:	00000014.00000003.390233696.0000000004C1B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C1B000
Size:	331776

Details

Name:	00000019.00000003.396009326.0000000001578000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1578000
Size:	20480

Details

Name:	0000002D.00000002.575134162.00007FF5ECC5C000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ECC5C000
Size:	8192

Details

Name:	00000006.00000003.355686962.0000000001369000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1369000
Size:	16384

Details

Name:	00000029.00000002.489018803.00000199BA550000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199BA550000
Size:	69632

Details

Name:	0000001F.00000002.438958118.00000000003E0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3E0000
Size:	16384

Details

Name:	00000006.00000002.573466156.00000000007C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	16384

Details

Name:	00000000.00000002.333660107.0000000000AE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AE0000
Size:	16384

Details

Name:	00000014.00000002.403642296.0000000000DDE000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DDE000
Size:	8192

Details

Name:	0000001B.00000003.406539064.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000006.00000002.574965290.0000000001345000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1345000
Size:	417792

Details

Name:	0000001C.00000000.404560479.0000000000EAA000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	EAA000
Size:	4096

Details

Name:	0000001F.00000003.417672127.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002A.00000002.576443520.00000267CBC61000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC61000
Size:	102400

Details

Name:	00000014.00000003.387202529.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000015.00000002.399595500.00007FF57D2C7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2C7000
Size:	4096

Details

Name:	00000019.00000003.394985178.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000014.00000002.404623331.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	00000000.00000002.333782162.0000000000F2A000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F2A000
Size:	126976

Details

Name:	00000029.00000002.489521792.00007FF5534DA000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5534DA000
Size:	8192

Details

Name:	00000012.00000000.370699401.00007FF5B1A71000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A71000
Size:	12288

Details

Name:	00000028.00000003.492795461.000002AC2DB93000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB93000
Size:	16384

Details

Name:	0000001C.00000002.407706686.0000000001554000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1554000
Size:	4096

Details

Name:	00000006.00000003.357076133.0000000005770000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5770000
Size:	8192

Details

Name:	00000005.00000002.362673427.00000202D2413000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2413000
Size:	86016

Details

Name:	00000006.00000003.364917166.000000000591D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	591D000
Size:	12288

Details

Name:	00000004.00000003.357817047.00000000036EC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EC000
Size:	8192

Details

Name:	00000006.00000003.381947069.00000000071B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B0000
Size:	4096

Details

Name:	00000012.00000000.370198631.000000784EB7B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	0000001F.00000003.415577171.00000000011CB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CB000
Size:	8192

Details

Name:	00000028.00000002.508650490.00007FF563D73000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D73000
Size:	16384

Details

Name:	00000004.00000003.357606493.00000000036AF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36AF000
Size:	32768

Details

Name:	00000006.00000003.360114431.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	00000028.00000002.508639406.00007FF563D6E000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D6E000
Size:	4096

Details

Name:	00000019.00000003.399536133.0000000001521000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1521000
Size:	40960

Details

Name:	00000012.00000002.574072157.0000024B7CF90000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF90000
Size:	20480

Details

Name:	00000022.00000002.442219988.0000004E0287E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E0287E000
Size:	8192

Details

Name:	00000000.00000002.333693439.0000000000CA1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	CA1000
Size:	200704

Details

Name:	0000002A.00000002.574174858.00000267C6600000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6600000
Size:	73728

Details

Name:	0000002A.00000000.515835980.00007FF5EDA91000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA91000
Size:	16384

Details

Name:	00000019.00000002.417253168.0000000001930000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1930000
Size:	40960

Details

Name:	00000015.00000002.397821547.0000013E70AE0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70AE0000
Size:	102400

Details

Name:	00000019.00000002.415903777.0000000001493000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1493000
Size:	4096

Details

Name:	0000001F.00000003.414543299.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	131072

Details

Name:	00000004.00000003.349614230.000000000449A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	449A000
Size:	430080

Details

Name:	00000006.00000003.549221086.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000019.00000002.417961971.0000000003225000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3225000
Size:	16384

Details

Name:	00000028.00000002.508017511.000002AC2DB7A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7A000
Size:	32768

Details

Name:	00000006.00000003.365224523.0000000005915000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5915000
Size:	8192

Details

Name:	00000000.00000002.333689500.0000000000CA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CA0000
Size:	4096

Details

Name:	0000001B.00000002.428197667.0000000000576000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	576000
Size:	36864

Details

Name:	00000004.00000000.332879697.0000000000880000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	880000
Size:	102400

Details

Name:	00000006.00000003.361113896.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000004.00000003.352152692.0000000003781000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3781000
Size:	8192

Details

Name:	0000001F.00000003.420202999.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	86016

Details

Name:	0000000A.00000002.366331611.0000000004A9E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4A9E000
Size:	8192

Details

Name:	00000006.00000002.580994688.0000000005F70000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F70000
Size:	36864

Details

Name:	0000000D.00000002.366700469.00000000003F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000005.00000002.362892214.00000202D2513000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2513000
Size:	20480

Details

Name:	00000022.00000002.443211914.00007FF54DBDE000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBDE000
Size:	28672

Details

Name:	00000019.00000002.417092726.000000000172E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	172E000
Size:	8192

Details

Name:	0000000D.00000000.366578905.00000000FF9E2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E2000
Size:	4096

Details

Name:	00000026.00000002.467195800.00007FF55A17D000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A17D000
Size:	8192

Details

Name:	00000022.00000002.442641772.0000017AD22D0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD22D0000
Size:	12288

Details

Name:	0000001F.00000002.439428209.00000000010AB000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10AB000
Size:	4096

Details

Name:	0000002A.00000000.515717541.00007DF5FB6F2000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB6F2000
Size:	4096

Details

Name:	00000019.00000003.400209070.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	12288

Details

Name:	00000006.00000003.459920149.00000000013AE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13AE000
Size:	4096

Details

Name:	00000029.00000002.488823378.00000199BA13E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA13E000
Size:	49152

Details

Name:	00000029.00000002.489096984.00007DF5611C2000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611C2000
Size:	4096

Details

Name:	00000004.00000002.360476726.00000000011D0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11D0000
Size:	8192

Details

Name:	00000012.00000000.370414820.0000024B7CE00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CE00000
Size:	12288

Details

Name:	0000001B.00000003.426449810.00000000004DF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF000
Size:	8192

Details

Name:	00000022.00000002.442840314.00007FF54D791000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D791000
Size:	20480

Details

Name:	0000001B.00000002.429054621.00000000FF2A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF2A0000
Size:	12288

Details

Name:	0000001B.00000002.428558512.0000000000CC7000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CC7000
Size:	151552

Details

Name:	0000000A.00000002.366349687.0000000004DF0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DF0000
Size:	65536

Details

Name:	0000001F.00000003.417453585.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000028.00000002.507260259.000002AC2D0B0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D0B0000
Size:	12288

Details

Name:	00000006.00000003.355542952.0000000001358000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1358000
Size:	61440

Details

Name:	00000014.00000002.405094472.0000000003EC5000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC5000
Size:	4096

Details

Name:	0000002A.00000002.575736913.00000267C76C0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C76C0000
Size:	65536

Details

Name:	00000006.00000003.364837061.0000000006820000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6820000
Size:	65536

Details

Name:	00000028.00000002.507622357.000002AC2D2D7000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2D7000
Size:	45056

Details

Name:	00000016.00000000.390716328.00000000FF9D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D2000
Size:	4096

Details

Name:	00000014.00000003.387693771.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000012.00000000.394244446.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000022.00000002.442931693.00007FF54DA80000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA80000
Size:	4096

Details

Name:	0000001F.00000002.440288472.00000000054F0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	54F0000
Size:	12288

Details

Name:	0000001F.00000003.425095202.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.359855588.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	00000004.00000002.359435304.00000000003F1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000019.00000003.395396787.0000000001570000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1570000
Size:	24576

Details

Name:	00000026.00000002.465514258.000000F45139B000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F45139B000
Size:	20480

Details

Name:	00000019.00000002.416634967.000000000152D000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	152D000
Size:	8192

Details

Name:	00000006.00000003.360096232.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	0000001F.00000002.439419093.00000000010A7000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10A7000
Size:	4096

Details

Name:	00000004.00000002.360484554.00000000011F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	11F0000
Size:	12288

Details

Name:	00000016.00000002.391196860.00000000FF9E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E0000
Size:	12288

Details

Name:	00000000.00000002.334007970.000000000307E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	307E000
Size:	8192

Details

Name:	0000001F.00000003.421072009.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	8192

Details

Name:	00000006.00000003.459768557.0000000005092000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5092000
Size:	167936

Details

Name:	00000019.00000003.395187903.0000000001583000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1583000
Size:	28672

Details

Name:	0000002A.00000002.575703453.00000267C75E0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C75E0000
Size:	4096

Details

Name:	00000019.00000003.400179216.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	8192

Details

Name:	00000004.00000003.358404683.000000000369F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	369F000
Size:	4096

Details

Name:	00000000.00000002.334003853.0000000002E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000019.00000002.417359713.0000000001940000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1940000
Size:	65536

Details

Name:	0000001B.00000000.396660595.00000000FF280000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF280000
Size:	4096

Details

Name:	00000019.00000003.399820581.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001B.00000003.426912379.00000000004F9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	8192

Details

Name:	00000004.00000003.346437489.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000002D.00000002.575558995.00007FF5ED41A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED41A000
Size:	8192

Details

Name:	00000012.00000000.370498695.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	0000001F.00000003.415714024.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	86016

Details

Name:	00000022.00000002.443488723.00007FF54DCAA000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCAA000
Size:	4096

Details

Name:	00000006.00000003.353636740.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000019.00000003.396733199.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000015.00000003.397376738.0000013E72A7A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A7A000
Size:	16384

Details

Name:	00000004.00000003.357475346.0000000003723000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3723000
Size:	36864

Details

Name:	0000001B.00000003.426374481.000000000052C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	4096

Details

Name:	00000014.00000003.401788921.0000000003E39000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E39000
Size:	45056

Details

Name:	00000006.00000003.365949938.00000000069B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69B0000
Size:	4096

Details

Name:	00000015.00000002.399130172.00007FF57CFB5000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CFB5000
Size:	28672

Details

Name:	00000022.00000002.442480167.0000017AD1E56000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E56000
Size:	102400

Details

Name:	0000002A.00000002.577733649.00007FF5ED68C000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED68C000
Size:	4096

Details

Name:	0000000D.00000002.366850105.0000000000EB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EB0000
Size:	16384

Details

Name:	0000001F.00000003.417227696.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000000.00000003.307710498.0000000000F43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F43000
Size:	81920

Details

Name:	0000002A.00000003.520918854.00000267CBBE0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBBE0000
Size:	4096

Details

Name:	00000004.00000003.358466150.0000000003698000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3698000
Size:	8192

Details

Name:	00000019.00000002.416264886.00000000014C2000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14C2000
Size:	4096

Details

Name:	00000012.00000002.573930342.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	00000014.00000002.403842088.00000000014A0000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14A0000
Size:	28672

Details

Name:	0000002A.00000002.574001357.00000267C6560000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6560000
Size:	4096

Details

Name:	00000028.00000003.485791828.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	73728

Details

Name:	0000001F.00000003.418340245.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	4096

Details

Name:	00000015.00000002.400088719.00007FF57D351000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D351000
Size:	20480

Details

Name:	00000019.00000003.396476355.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002A.00000000.515761390.00007DF5FB702000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB702000
Size:	4096

Details

Name:	00000004.00000003.358298663.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	00000029.00000003.488280850.00000199BA13E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA13E000
Size:	57344

Details

Name:	00000019.00000003.398246181.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	65536

Details

Name:	0000000A.00000002.366131308.00000000012B0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12B0000
Size:	4096

Details

Name:	00000014.00000002.404527793.0000000003DCD000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DCD000
Size:	12288

Details

Name:	00000014.00000003.394739358.0000000003E89000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E89000
Size:	8192

Details

Name:	00000014.00000002.403712932.0000000000FBB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FBB000
Size:	4096

Details

Name:	0000001B.00000003.415092259.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000000.00000003.330564570.0000000000F50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F50000
Size:	4096

Details

Name:	00000026.00000002.465923623.0000024187D40000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24187D40000
Size:	4096

Details

Name:	0000002A.00000002.576900653.00000267CBEF0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBEF0000
Size:	4096

Details

Name:	00000006.00000003.448620859.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000028.00000003.493479472.000002AC2DBA1000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA1000
Size:	53248

Details

Name:	00000028.00000003.506651729.000002AC2D24C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D24C000
Size:	4096

Details

Name:	0000001B.00000003.425727787.0000000000561000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	561000
Size:	45056

Details

Name:	0000001F.00000003.438313327.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000026.00000002.466845061.00007FF55A00F000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A00F000
Size:	8192

Details

Name:	0000001F.00000002.439047087.0000000000439000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	439000
Size:	4096

Details

Name:	00000026.00000002.465759458.000000F451B7E000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F451B7E000
Size:	8192

Details

Name:	00000015.00000002.399625898.00007FF57D2D9000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2D9000
Size:	8192

Details

Name:	00000026.00000002.466252374.0000024187F08000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187F08000
Size:	24576

Details

Name:	0000000F.00000000.368825146.000000007F200000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F200000
Size:	12288

Details

Name:	0000001B.00000003.426864500.00000000004EA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA000
Size:	4096

Details

Name:	00000019.00000003.401547851.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	49152

Details

Name:	00000014.00000003.390101134.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000006.00000003.354806024.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000012.00000000.394520145.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	00000004.00000003.358492049.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	0000001F.00000003.425682753.0000000001194000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1194000
Size:	32768

Details

Name:	0000000F.00000002.370464405.00000000007F0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	0000001F.00000003.423249488.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	8192

Details

Name:	00000006.00000003.364305057.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	40960

Details

Name:	00000006.00000003.366035451.0000000006D00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D00000
Size:	12288

Details

Name:	00000000.00000000.306839897.0000000000CA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	CA0000
Size:	4096

Details

Name:	00000014.00000003.402841014.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	00000014.00000003.402104998.0000000003DF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF0000
Size:	24576

Details

Name:	0000000A.00000002.366449802.000000007FED2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	00000006.00000003.358021233.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.418166891.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000003.420095345.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	4096

Details

Name:	00000006.00000003.356820884.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	45056

Details

Name:	0000002A.00000002.575279988.00000267C6C60000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6C60000
Size:	20480

Details

Name:	00000014.00000003.390143833.0000000003E95000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E95000
Size:	49152

Details

Name:	00000006.00000003.359752452.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	00000006.00000003.354263910.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	65536

Details

Name:	0000002A.00000002.578625285.00007FF5EDA0A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA0A000
Size:	8192

Details

Name:	00000005.00000002.363512723.00007FF5C31C7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C31C7000
Size:	8192

Details

Name:	0000001F.00000003.421235017.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	20480

Details

Name:	0000001F.00000003.416073116.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000028.00000003.484180966.000002AC2DB83000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB83000
Size:	32768

Details

Name:	00000026.00000002.466765003.00007FF559FB1000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559FB1000
Size:	8192

Details

Name:	00000006.00000003.352595529.000000000135A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	135A000
Size:	114688

Details

Name:	00000019.00000003.395359246.000000000156E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	156E000
Size:	32768

Details

Name:	00000012.00000000.394054009.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	0000001F.00000002.439997608.0000000002E70000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E70000
Size:	20480

Details

Name:	0000001F.00000003.423356647.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	4096

Details

Name:	0000002D.00000002.574883815.0000028B31100000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B31100000
Size:	4096

Details

Name:	00000006.00000003.494510032.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000F.00000002.370660759.0000000000D20000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D20000
Size:	16384

Details

Name:	00000015.00000002.397883099.0000013E70B50000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70B50000
Size:	8192

Details

Name:	00000019.00000003.395534629.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	176128

Details

Name:	00000022.00000002.442756604.00007DF55B922000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B922000
Size:	4096

Details

Name:	00000000.00000002.333675530.0000000000B3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B3E000
Size:	8192

Details

Name:	00000006.00000003.356097213.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	53248

Details

Name:	00000028.00000003.484154274.000002AC2DB79000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB79000
Size:	32768

Details

Name:	00000028.00000003.485698396.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	53248

Details

Name:	00000028.00000002.509039970.00007FF563E69000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E69000
Size:	12288

Details

Name:	0000001F.00000003.418057713.00000000054F1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F1000
Size:	61440

Details

Name:	00000028.00000002.507005800.000000FA9337B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9337B000
Size:	20480

Details

Name:	00000014.00000003.402355363.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	00000028.00000003.482306874.000002AC2DB91000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB91000
Size:	4096

Details

Name:	00000019.00000003.395793421.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	24576

Details

Name:	00000019.00000003.396028609.0000000001567000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1567000
Size:	69632

Details

Name:	00000006.00000002.573776006.0000000000B22000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	B22000
Size:	98304

Details

Name:	00000015.00000002.397894220.0000013E70B80000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70B80000
Size:	12288

Details

Name:	0000001F.00000003.417717952.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.359371321.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000004.00000003.357447263.0000000003720000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3720000
Size:	49152

Details

Name:	00000014.00000002.405284519.0000000003F4D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F4D000
Size:	8192

Details

Name:	00000014.00000003.402771686.0000000003DF9000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF9000
Size:	8192

Details

Name:	00000005.00000002.362805503.00000202D2500000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2500000
Size:	4096

Details

Name:	00000019.00000002.419058672.0000000005940000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5940000
Size:	4096

Details

Name:	0000001B.00000002.428035816.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	00000006.00000003.357709352.0000000001358000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1358000
Size:	90112

Details

Name:	0000001F.00000003.418791160.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	16384

Details

Name:	0000001B.00000003.407439569.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000004.00000003.345431314.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000022.00000002.443364061.00007FF54DC2A000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC2A000
Size:	8192

Details

Name:	00000005.00000002.363583543.00007FF5C324A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C324A000
Size:	4096

Details

Name:	0000000D.00000000.366573730.00000000FF9E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E0000
Size:	4096

Details

Name:	00000019.00000003.400697143.0000000001525000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1525000
Size:	94208

Details

Name:	00000019.00000003.399198558.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	24576

Details

Name:	00000006.00000002.579676329.0000000005530000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5530000
Size:	65536

Details

Name:	00000006.00000003.365044706.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	49152

Details

Name:	00000026.00000002.466223710.0000024187F00000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187F00000
Size:	4096

Details

Name:	0000001B.00000003.425206959.00000000004F6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	20480

Details

Name:	0000002A.00000002.574088857.00000267C6590000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6590000
Size:	16384

Details

Name:	00000022.00000002.443299918.00007FF54DC03000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC03000
Size:	24576

Details

Name:	00000006.00000003.364445168.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	28672

Details

Name:	0000001B.00000003.426711733.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	00000028.00000002.507226663.000002AC2D090000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D090000
Size:	102400

Details

Name:	00000004.00000003.346359645.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000002A.00000002.573602380.000000A9458FB000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9458FB000
Size:	20480

Details

Name:	0000001B.00000003.427040659.0000000000585000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	585000
Size:	8192

Details

Name:	00000014.00000003.394145739.0000000003EC4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC4000
Size:	8192

Details

Name:	00000028.00000002.506905588.000000FA9307B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9307B000
Size:	20480

Details

Name:	0000002D.00000002.575326796.00007FF5ED3AD000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3AD000
Size:	4096

Details

Name:	00000014.00000003.402869979.0000000003E83000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E83000
Size:	8192

Details

Name:	00000004.00000002.360315667.0000000001100000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1100000
Size:	4096

Details

Name:	0000001B.00000002.428085269.0000000000539000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	539000
Size:	45056

Details

Name:	00000028.00000002.508198653.00007FF563971000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563971000
Size:	20480

Details

Name:	0000001B.00000003.426410284.000000000050B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50B000
Size:	24576

Details

Name:	00000026.00000002.465995368.0000024187E02000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E02000
Size:	65536

Details

Name:	00000019.00000003.395588776.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	00000014.00000003.402860588.0000000003DE8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE8000
Size:	4096

Details

Name:	00000006.00000003.449100094.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001B.00000003.407539505.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000001B.00000003.425824976.0000000000547000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	16384

Details

Name:	00000015.00000002.398600688.0000013E72A83000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A83000
Size:	8192

Details

Name:	00000006.00000003.366189723.0000000006D00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D00000
Size:	32768

Details

Name:	00000028.00000003.483806829.000002AC2DB84000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB84000
Size:	94208

Details

Name:	00000019.00000000.393870900.00000000007FA000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA000
Size:	4096

Details

Name:	00000014.00000003.401997096.0000000003E2C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2C000
Size:	4096

Details

Name:	0000002A.00000002.577849407.00007FF5ED79B000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED79B000
Size:	8192

Details

Name:	00000019.00000003.395872371.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000004.00000002.360714290.0000000001EEE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EEE000
Size:	8192

Details

Name:	0000002A.00000002.576883973.00000267CBE10000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBE10000
Size:	4096

Details

Name:	00000015.00000002.397967107.0000013E70BB8000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BB8000
Size:	4096

Details

Name:	0000001C.00000002.407429990.0000000000F50000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F50000
Size:	4096

Details

Name:	00000014.00000003.402967711.0000000003E6E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E6E000
Size:	12288

Details

Name:	00000006.00000003.534199874.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000004.00000003.346468367.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000019.00000002.415213891.00000000008B3000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8B3000
Size:	4096

Details

Name:	00000028.00000000.475248676.00007FF563E91000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E91000
Size:	16384

Details

Name:	0000001C.00000002.407570656.00000000012F9000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F9000
Size:	28672

Details

Name:	00000012.00000002.574195740.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	00000000.00000002.334095764.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	0000001B.00000003.425267072.000000000057F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57F000
Size:	32768

Details

Name:	00000000.00000002.333568949.0000000000557000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	557000
Size:	36864

Details

Name:	0000002A.00000002.576298598.00000267CBC41000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC41000
Size:	49152

Details

Name:	0000001F.00000003.417285753.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000004.00000003.350434168.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000006.00000003.515050198.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000006.00000003.358818108.0000000005870000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5870000
Size:	12288

Details

Name:	00000019.00000002.418310443.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	57344

Details

Name:	00000006.00000003.357534194.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	28672

Details

Name:	0000000F.00000002.371046018.0000000002C0F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C0F000
Size:	4096

Details

Name:	00000006.00000003.415332020.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	0000000A.00000000.363559096.00000000006D0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	102400

Details

Name:	0000001B.00000003.427011899.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	00000000.00000003.329539415.00000000071B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B1000
Size:	200704

Details

Name:	00000015.00000002.398869568.00007FF57CC41000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CC41000
Size:	16384

Details

Name:	00000004.00000003.358897868.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	4096

Details

Name:	00000004.00000003.346509343.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000014.00000003.395047875.0000000003EC4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EC4000
Size:	8192

Details

Name:	0000000F.00000002.370682325.0000000000D5A000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D5A000
Size:	126976

Details

Name:	0000001F.00000002.440772987.000000007FCF0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCF0000
Size:	20480

Details

Name:	00000022.00000002.443276286.00007FF54DBFB000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBFB000
Size:	12288

Details

Name:	0000001F.00000002.439917535.0000000002DBE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DBE000
Size:	8192

Details

Name:	00000004.00000003.352491135.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	0000002A.00000002.575426878.00000267C6DF0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6DF0000
Size:	4096

Details

Name:	00000000.00000003.307261588.00000000011B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11B0000
Size:	114688

Details

Name:	0000002A.00000002.573966694.00000267C6550000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6550000
Size:	12288

Details

Name:	00000004.00000003.357380638.000000000371E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	371E000
Size:	57344

Details

Name:	00000028.00000003.493630569.000002AC2DB90000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB90000
Size:	8192

Details

Name:	0000000A.00000002.365810968.00000000006C0000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6C0000
Size:	4096

Details

Name:	00000014.00000002.404910324.0000000003E45000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E45000
Size:	8192

Details

Name:	00000006.00000003.364068895.0000000005904000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5904000
Size:	8192

Details

Name:	00000014.00000003.401650933.0000000003E45000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E45000
Size:	8192

Details

Name:	00000012.00000000.370360087.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	49152

Details

Name:	00000022.00000002.442206295.0000004E0277F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E0277F000
Size:	4096

Details

Name:	00000004.00000003.345547580.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000014.00000000.372556620.00000000FF632000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF632000
Size:	4096

Details

Name:	00000029.00000002.489053415.00000199BA6D0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199BA6D0000
Size:	4096

Details

Name:	00000005.00000002.363044846.00007DF5D0EC2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EC2000
Size:	4096

Details

Name:	0000000F.00000002.370775325.0000000000F8E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F8E000
Size:	8192

Details

Name:	00000015.00000002.400066999.00007FF57D34A000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D34A000
Size:	8192

Details

Name:	0000002A.00000002.575509306.00000267C6F00000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F00000
Size:	4096

Details

Name:	0000000F.00000002.370863678.0000000001040000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1040000
Size:	8192

Details

Name:	00000015.00000003.397365458.0000013E72A66000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A66000
Size:	8192

Details

Name:	0000002A.00000002.578373247.00007FF5ED99D000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED99D000
Size:	4096

Details

Name:	0000000F.00000002.370624856.0000000000B90000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B90000
Size:	16384

Details

Name:	0000001F.00000002.439142952.0000000000772000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	772000
Size:	98304

Details

Name:	0000001F.00000003.418260497.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	49152

Details

Name:	00000015.00000002.400075209.00007FF57D34D000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D34D000
Size:	8192

Details

Name:	0000001B.00000002.428951139.00000000FF180000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF180000
Size:	20480

Details

Name:	00000016.00000000.390686602.00000000FF9C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C0000
Size:	4096

Details

Name:	00000004.00000002.361106447.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000014.00000000.372546309.00000000FF630000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF630000
Size:	4096

Details

Name:	00000028.00000003.506605201.000002AC2D254000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D254000
Size:	4096

Details

Name:	00000028.00000003.479845052.000002AC2DB7E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7E000
Size:	8192

Details

Name:	00000005.00000002.363417319.00007FF5C3170000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3170000
Size:	4096

Details

Name:	00000028.00000002.508615256.00007FF563D52000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D52000
Size:	4096

Details

Name:	00000019.00000002.415177920.00000000008AD000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8AD000
Size:	4096

Details

Name:	00000006.00000003.359339341.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000015.00000002.399731175.00007FF57D2F0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2F0000
Size:	4096

Details

Name:	00000026.00000002.467002925.00007FF55A10F000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A10F000
Size:	12288

Details

Name:	0000002A.00000002.578240353.00007FF5ED952000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED952000
Size:	4096

Details

Name:	0000001B.00000003.426938318.00000000004F9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	8192

Details

Name:	0000001B.00000003.426082972.0000000000545000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	8192

Details

Name:	00000006.00000002.576223505.0000000002CE0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CE0000
Size:	65536

Details

Name:	00000014.00000003.399820648.0000000003DEB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DEB000
Size:	630784

Details

Name:	0000001F.00000002.439833421.0000000001400000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1400000
Size:	65536

Details

Name:	0000002A.00000002.578817558.00007FF5EDA8E000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA8E000
Size:	28672

Details

Name:	00000014.00000002.405321017.00000000046BF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	46BF000
Size:	4096

Details

Name:	00000015.00000002.398353556.0000013E725E0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E725E0000
Size:	733184

Details

Name:	00000004.00000002.360739771.00000000020F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F0000
Size:	69632

Details

Name:	0000001F.00000003.418401043.000000000119E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	119E000
Size:	131072

Details

Name:	0000001F.00000002.440227136.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001B.00000003.410243635.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000002D.00000002.575800582.00007FF5ED495000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED495000
Size:	16384

Details

Name:	0000001F.00000002.439551937.0000000001120000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1120000
Size:	65536

Details

Name:	00000006.00000002.581208617.000000000675E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	675E000
Size:	8192

Details

Name:	0000002D.00000002.574736313.0000028B310D0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B310D0000
Size:	65536

Details

Name:	00000006.00000000.351353341.000000007FF92000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF92000
Size:	4096

Details

Name:	0000001B.00000003.420571984.00000000004EB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB000
Size:	528384

Details

Name:	00000004.00000002.360578757.0000000001278000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1278000
Size:	8192

Details

Name:	00000029.00000002.489394834.00007FF55348E000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55348E000
Size:	4096

Details

Name:	00000022.00000002.442686021.00007DF4597E0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4597E0000
Size:	20480

Details

Name:	00000029.00000002.489576008.00007FF553532000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553532000
Size:	12288

Details

Name:	00000006.00000002.576376529.0000000002E8B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E8B000
Size:	32768

Details

Name:	0000001F.00000003.420625163.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	24576

Details

Name:	0000002D.00000002.574328447.0000028B30520000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30520000
Size:	4096

Details

Name:	00000015.00000002.397722902.0000001DB8CFE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8CFE000
Size:	8192

Details

Name:	0000001B.00000003.407278644.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000019.00000002.414962829.00000000007F0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000022.00000002.442766990.00007DF55B930000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B930000
Size:	12288

Details

Name:	00000015.00000002.399869152.00007FF57D307000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D307000
Size:	49152

Details

Name:	00000022.00000002.442559062.0000017AD1F00000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1F00000
Size:	4096

Details

Name:	00000022.00000002.442987520.00007FF54DB0B000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB0B000
Size:	24576

Details

Name:	00000012.00000000.394315183.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	00000004.00000002.361196880.00000000042F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	42F0000
Size:	733184

Details

Name:	00000006.00000003.357408029.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	65536

Details

Name:	00000028.00000002.507685197.000002AC2D308000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D308000
Size:	28672

Details

Name:	00000019.00000003.396715137.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000019.00000002.421032118.000000007EF80000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EF80000
Size:	20480

Details

Name:	00000012.00000002.574950737.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	00000005.00000002.363573029.00007FF5C3241000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3241000
Size:	32768

Details

Name:	0000002A.00000002.573706432.000000A945B7F000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945B7F000
Size:	4096

Details

Name:	00000026.00000002.467107868.00007FF55A137000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A137000
Size:	49152

Details

Name:	00000012.00000000.394505676.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	0000001F.00000002.439059512.000000000043C000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43C000
Size:	4096

Details

Name:	00000006.00000003.355948060.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	36864

Details

Name:	00000006.00000003.460790266.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000014.00000002.404862673.0000000003E2C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2C000
Size:	4096

Details

Name:	00000028.00000002.507125196.000000FA9377F000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9377F000
Size:	4096

Details

Name:	00000006.00000002.581419155.000000000687D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	687D000
Size:	12288

Details

Name:	0000002A.00000002.574117664.00000267C65B0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C65B0000
Size:	4096

Details

Name:	00000019.00000003.414142382.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001C.00000002.407944787.0000000001600000.00000004.00000020.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1600000
Size:	32768

Details

Name:	00000000.00000003.333425387.0000000000F4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F4A000
Size:	4096

Details

Name:	00000028.00000000.475147216.00007DF571AF2000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571AF2000
Size:	4096

Details

Name:	0000000D.00000002.366888159.00000000FF9F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9F0000
Size:	12288

Details

Name:	00000019.00000003.396841044.0000000003451000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3451000
Size:	61440

Details

Name:	0000002A.00000002.578305257.00007FF5ED973000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED973000
Size:	16384

Details

Name:	0000001F.00000002.439506890.0000000001100000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1100000
Size:	12288

Details

Name:	0000001B.00000002.427607763.0000000000360000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	360000
Size:	4096

Details

Name:	00000028.00000003.480550685.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	114688

Details

Name:	00000012.00000000.393944819.0000024B7C820000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000012.00000000.370692607.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	00000012.00000002.573949235.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000006.00000003.364505338.0000000005918000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5918000
Size:	32768

Details

Name:	0000002A.00000002.577800256.00007FF5ED762000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED762000
Size:	4096

Details

Name:	00000006.00000003.357347998.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001B.00000003.413154882.000000000058A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58A000
Size:	94208

Details

Name:	00000019.00000003.395524463.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	00000014.00000003.400610310.0000000003E60000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E60000
Size:	69632

Details

Name:	00000028.00000002.508433554.00007FF563C49000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C49000
Size:	4096

Details

Name:	00000006.00000002.575880990.0000000001890000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1890000
Size:	4096

Details

Name:	00000014.00000003.387511759.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000019.00000003.396449911.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000000F.00000002.370612887.0000000000B89000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B89000
Size:	28672

Details

Name:	0000002D.00000002.574850657.0000028B310F0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B310F0000
Size:	4096

Details

Name:	00000028.00000003.479835554.000002AC2DB7C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7C000
Size:	4096

Details

Name:	00000019.00000002.418355989.0000000003290000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3290000
Size:	20480

Details

Name:	00000006.00000002.581045136.00000000060D0000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	60D0000
Size:	8192

Details

Name:	00000005.00000002.363567042.00007FF5C323A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C323A000
Size:	12288

Details

Name:	0000001C.00000002.407933125.00000000015F0000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	15F0000
Size:	8192

Details

Name:	00000005.00000002.362526222.00000202D2300000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	202D2300000
Size:	4096

Details

Name:	00000029.00000002.488951474.00000199BA340000.00000004.00000040.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	199BA340000
Size:	12288

Details

Name:	00000012.00000000.394514092.00007FF5B19AE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19AE000
Size:	4096

Details

Name:	00000000.00000002.333799198.0000000000FA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA0000
Size:	208896

Details

Name:	00000004.00000003.357904310.00000000036BF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BF000
Size:	8192

Details

Name:	00000022.00000002.443010371.00007FF54DB1C000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB1C000
Size:	4096

Details

Name:	00000026.00000002.465900379.0000024187D30000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24187D30000
Size:	12288

Details

Name:	0000001F.00000002.440332265.0000000005530000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5530000
Size:	65536

Details

Name:	0000001C.00000003.406889211.0000000005710000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5710000
Size:	65536

Details

Name:	00000028.00000002.508710374.00007FF563D87000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D87000
Size:	4096

Details

Name:	0000002A.00000002.578680167.00007FF5EDA62000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA62000
Size:	12288

Details

Name:	0000002A.00000002.578356175.00007FF5ED999000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED999000
Size:	8192

Details

Name:	0000001F.00000003.415409585.00000000011BC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11BC000
Size:	8192

Details

Name:	0000002A.00000003.516647691.00000267CBE10000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBE10000
Size:	8192

Details

Name:	0000001F.00000003.418153547.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000019.00000003.395347358.0000000001567000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1567000
Size:	61440

Details

Name:	00000006.00000003.403092323.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	4096

Details

Name:	0000001F.00000003.420588054.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	4096

Details

Name:	00000006.00000002.581554054.00000000069C9000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69C9000
Size:	4096

Details

Name:	00000004.00000002.361129152.00000000037A0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	37A0000
Size:	8192

Details

Name:	00000019.00000003.398994498.0000000005BB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	24576

Details

Name:	00000004.00000003.352331920.0000000004542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4542000
Size:	12288

Details

Name:	00000019.00000002.415844025.000000000145E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	145E000
Size:	8192

Details

Name:	00000019.00000003.400597787.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	65536

Details

Name:	00000006.00000002.581085618.00000000062DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	62DE000
Size:	8192

Details

Name:	00000012.00000000.370181369.000000784E54B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000029.00000002.488613519.0000000257FFE000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257FFE000
Size:	8192

Details

Name:	0000002A.00000002.578028754.00007FF5ED832000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED832000
Size:	8192

Details

Name:	00000028.00000002.508336205.00007FF563BD4000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563BD4000
Size:	4096

Details

Name:	00000004.00000003.358717157.00000000036B4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B4000
Size:	4096

Details

Name:	00000004.00000003.357667512.00000000036F9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	45056

Details

Name:	00000006.00000002.575911182.00000000018A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18A0000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000004.00000003.359004457.000000000371E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	371E000
Size:	8192

Details

Name:	00000004.00000003.349488177.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	786432

Details

Name:	00000006.00000003.482935621.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000002A.00000002.576223306.00000267CBC22000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC22000
Size:	49152

Details

Name:	00000026.00000002.466332245.00000241882D0000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	241882D0000
Size:	12288

Details

Name:	00000012.00000002.573678523.0000024B7CA02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA02000
Size:	65536

Details

Name:	00000006.00000003.403060321.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	139264

Details

Name:	0000001C.00000002.407465553.0000000000FE0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE0000
Size:	4096

Details

Name:	00000026.00000002.466814240.00007FF559FD0000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559FD0000
Size:	4096

Details

Name:	00000029.00000002.489137235.00007DF5611E0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611E0000
Size:	12288

Details

Name:	00000028.00000003.480648620.000002AC2DB7F000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7F000
Size:	57344

Details

Name:	00000014.00000003.402923980.0000000003E55000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E55000
Size:	4096

Details

Name:	00000006.00000003.460027027.00000000013EC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13EC000
Size:	12288

Details

Name:	00000029.00000002.488854811.00000199BA14B000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14B000
Size:	4096

Details

Name:	00000015.00000002.398943457.00007FF57CE26000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CE26000
Size:	4096

Details

Name:	00000029.00000002.489641694.00007FF553555000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553555000
Size:	16384

Details

Name:	00000006.00000003.498491141.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000012.00000000.370373065.0000024B7CA36000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA36000
Size:	24576

Details

Name:	00000006.00000003.518106060.0000000006995000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6995000
Size:	114688

Details

Name:	00000000.00000003.307730059.0000000000F5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E000
Size:	4096

Details

Name:	00000004.00000003.358378771.000000000369A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	369A000
Size:	16384

Details

Name:	00000006.00000003.354746469.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.386034473.00000000069BF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	69BF000
Size:	4096

Details

Name:	0000001B.00000002.428301103.00000000006E6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E6000
Size:	4096

Details

Name:	00000014.00000003.402518994.0000000003DD7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD7000
Size:	12288

Details

Name:	00000028.00000003.490237966.000002AC2DBB9000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBB9000
Size:	73728

Details

Name:	0000002D.00000002.574838785.0000028B310E0000.00000002.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	28B310E0000
Size:	4096

Details

Name:	00000004.00000003.358057849.00000000036A7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A7000
Size:	8192

Details

Name:	00000006.00000003.353245058.000000000135E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	135E000
Size:	12288

Details

Name:	00000012.00000000.370713880.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	00000014.00000002.404584960.0000000003DD4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD4000
Size:	8192

Details

Name:	00000014.00000003.402786786.0000000003E09000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E09000
Size:	8192

Details

Name:	00000016.00000002.391123719.00000000FF9C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C2000
Size:	4096

Details

Name:	00000028.00000002.508814387.00007FF563DB7000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DB7000
Size:	16384

Details

Name:	00000016.00000001.390762731.00000000003F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	0000000F.00000002.370764551.0000000000F4E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F4E000
Size:	8192

Details

Name:	0000001B.00000002.427553289.0000000000280000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	280000
Size:	28672

Details

Name:	00000012.00000002.573967056.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	00000006.00000003.357394848.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	8192

Details

Name:	00000019.00000003.398488769.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001F.00000003.418895983.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000003.399314451.0000000005BB0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB0000
Size:	8192

Details

Name:	00000006.00000002.579224722.000000000347F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	347F000
Size:	20480

Details

Name:	00000022.00000003.441860390.0000017AD1E4F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E4F000
Size:	16384

Details

Name:	00000028.00000003.483729635.000002AC2E019000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E019000
Size:	90112

Details

Name:	00000014.00000002.403387232.0000000000481000.00000008.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	481000
Size:	4096

Details

Name:	00000006.00000002.579760412.00000000055F0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55F0000
Size:	16384

Details

Name:	00000006.00000003.353276025.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000006.00000003.353551666.0000000001356000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1356000
Size:	32768

Details

Name:	00000000.00000002.334013319.000000000317F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	317F000
Size:	4096

Details

Name:	00000019.00000002.417193200.0000000001780000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1780000
Size:	12288

Details

Name:	00000006.00000003.357286564.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	65536

Details

Name:	0000000A.00000000.363590512.000000007FEC2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEC2000
Size:	4096

Details

Name:	00000006.00000002.579786694.00000000055FA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55FA000
Size:	24576

Details

Name:	00000006.00000003.358056197.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	65536

Details

Name:	00000026.00000000.451918275.00007FF55A201000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A201000
Size:	16384

Details

Name:	0000001F.00000002.440527335.00000000057C0000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	57C0000
Size:	28672

Details

Name:	0000002D.00000002.573259683.000000FFB6ECB000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB6ECB000
Size:	20480

Details

Name:	00000014.00000003.400707483.0000000003E5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5E000
Size:	8192

Details

Name:	00000019.00000002.417064076.00000000016E0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16E0000
Size:	4096

Details

Name:	00000015.00000002.400164302.00007FF57D3B4000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3B4000
Size:	20480

Details

Name:	00000029.00000000.476744942.00007DF5611E0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611E0000
Size:	12288

Details

Name:	00000000.00000002.334021771.00000000032BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32BE000
Size:	8192

Details

Name:	00000006.00000003.352984216.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	0000001F.00000003.415893238.00000000011CB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CB000
Size:	8192

Details

Name:	00000016.00000002.390853604.00000000003F1000.00000020.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	0000000F.00000002.370498617.00000000008DF000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DF000
Size:	4096

Details

Name:	0000001B.00000002.427464546.00000000000AA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AA000
Size:	24576

Details

Name:	0000002A.00000002.574899312.00000267C668F000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C668F000
Size:	4096

Details

Name:	00000026.00000002.467086131.00007FF55A12E000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A12E000
Size:	28672

Details

Name:	00000012.00000000.393928657.000000784EB7B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	00000019.00000002.418417543.0000000003420000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3420000
Size:	4096

Details

Name:	00000029.00000003.488295249.00000199BA14D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14D000
Size:	20480

Details

Name:	00000019.00000003.398511740.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	4096

Details

Name:	00000006.00000002.581311071.0000000006820000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	6820000
Size:	20480

Details

Name:	00000028.00000002.508314611.00007FF563B9B000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563B9B000
Size:	8192

Details

Name:	00000028.00000003.482205847.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	122880

Details

Name:	00000019.00000003.397721013.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	65536

Details

Name:	00000006.00000002.575606305.000000000150E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	150E000
Size:	8192

Details

Name:	00000028.00000003.485735210.000002AC2DBA2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA2000
Size:	4096

Details

Name:	00000028.00000003.506578178.000002AC2D257000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D257000
Size:	12288

Details

Name:	00000004.00000003.357500791.000000000372D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	372D000
Size:	24576

Details

Name:	00000028.00000002.508384203.00007FF563BF5000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563BF5000
Size:	4096

Details

Name:	00000005.00000002.363018897.00007DF5D0EB2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EB2000
Size:	4096

Details

Name:	00000028.00000003.489010118.000002AC2DB9D000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB9D000
Size:	8192

Details

Name:	00000006.00000003.358511603.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	49152

Details

Name:	0000002A.00000002.574157367.00000267C65C0000.00000004.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	267C65C0000
Size:	4096

Details

Name:	0000001B.00000003.407054790.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000012.00000002.574860340.00007FF5B1A6A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A6A000
Size:	12288

Details

Name:	0000000F.00000002.370484665.00000000007FA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA000
Size:	4096

Details

Name:	0000001F.00000003.415614278.00000000011C3000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C3000
Size:	32768

Details

Name:	00000019.00000003.395690994.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000014.00000002.405159796.0000000003EF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EF0000
Size:	4096

Details

Name:	00000004.00000000.332849092.000000000049B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000003.402884327.0000000003E87000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E87000
Size:	4096

Details

Name:	0000001F.00000002.439086289.0000000000738000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	738000
Size:	32768

Details

Name:	00000006.00000003.382679717.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	00000006.00000003.358718783.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	0000001B.00000003.426256530.0000000000522000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	522000
Size:	12288

Details

Name:	00000004.00000002.360334231.000000000115E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	115E000
Size:	8192

Details

Name:	00000004.00000003.358880201.00000000036B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B1000
Size:	8192

Details

Name:	00000012.00000002.573819246.0000024B7CA29000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA29000
Size:	90112

Details

Name:	00000006.00000003.358156227.00000000013AA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13AA000
Size:	98304

Details

Name:	0000001B.00000003.410640853.0000000003DA1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DA1000
Size:	372736

Details

Name:	00000000.00000002.333593795.00000000006E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E2000
Size:	4096

Details

Name:	0000001F.00000003.420333883.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	45056

Details

Name:	00000028.00000003.482339343.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	4096

Details

Name:	00000004.00000002.360993219.000000000372E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	372E000
Size:	8192

Details

Name:	00000015.00000003.397091505.0000013E70BF2000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BF2000
Size:	290816

Details

Name:	00000012.00000000.370403148.0000024B7CB02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CB02000
Size:	12288

Details

Name:	00000004.00000003.358674721.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	00000000.00000003.329090617.0000000000F95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F95000
Size:	24576

Details

Name:	00000004.00000000.333044964.00000000FF222000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF222000
Size:	4096

Details

Name:	00000028.00000002.508303290.00007FF563B62000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563B62000
Size:	4096

Details

Name:	00000014.00000003.391810499.0000000004E00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E00000
Size:	53248

Details

Name:	00000022.00000002.442610921.0000017AD1F13000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1F13000
Size:	20480

Details

Name:	0000002A.00000003.516520175.00000267CBBE0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBBE0000
Size:	28672

Details

Name:	00000028.00000002.507499877.000002AC2D281000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D281000
Size:	36864

Details

Name:	00000006.00000003.355017166.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000012.00000000.394498667.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000019.00000003.400368377.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000000.00000002.333766861.0000000000F08000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F08000
Size:	126976

Details

Name:	00000000.00000002.333639292.00000000008F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8F2000
Size:	12288

Details

Name:	0000002A.00000003.516537911.00000267CBBE8000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBBE8000
Size:	16384

Details

Name:	00000022.00000002.442109025.0000004E022FE000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E022FE000
Size:	8192

Details

Name:	00000015.00000002.397770551.0000001DB8FFB000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB8FFB000
Size:	20480

Details

Name:	0000001F.00000003.414303101.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000001F.00000002.440881827.000000007FE10000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE10000
Size:	12288

Details

Name:	00000019.00000003.413783377.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	28672

Details

Name:	00000012.00000000.394630801.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	00000000.00000002.333875365.0000000001200000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1200000
Size:	36864

Details

Name:	00000006.00000003.512286181.00000000013AE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13AE000
Size:	4096

Details

Name:	0000002A.00000002.574416172.00000267C6629000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6629000
Size:	77824

Details

Name:	00000006.00000002.576209505.0000000002CD0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD0000
Size:	4096

Details

Name:	0000001C.00000002.408107283.00000000018E0000.00000004.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	18E0000
Size:	8192

Details

Name:	00000006.00000002.576280633.0000000002CF7000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2CF7000
Size:	32768

Details

Name:	00000006.00000002.581636176.0000000006BBC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BBC000
Size:	16384

Details

Name:	0000002D.00000002.575585371.00007FF5ED41D000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED41D000
Size:	8192

Details

Name:	0000002D.00000002.575003102.00007DF5FB110000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB110000
Size:	4096

Details

Name:	00000006.00000003.535481516.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000006.00000003.354458104.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	36864

Details

Name:	00000014.00000003.401845256.0000000003E22000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E22000
Size:	12288

Details

Name:	00000006.00000003.354905979.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001B.00000003.421486370.00000000005C7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7000
Size:	4096

Details

Name:	0000001B.00000003.426242933.000000000052A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52A000
Size:	12288

Details

Name:	0000002D.00000002.574603918.0000028B30E80000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30E80000
Size:	4096

Details

Name:	0000001F.00000002.439807527.00000000013EC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13EC000
Size:	16384

Details

Name:	00000014.00000003.390571803.0000000004C80000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C80000
Size:	430080

Details

Name:	0000001F.00000002.439264285.0000000001060000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1060000
Size:	8192

Details

Name:	00000005.00000002.363301455.00007FF5C30D1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C30D1000
Size:	12288

Details

Name:	00000019.00000003.413851258.0000000005C40000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	20480

Details

Name:	0000001B.00000003.421606092.00000000004E4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E4000
Size:	4096

Details

Name:	00000026.00000002.466921323.00007FF55A081000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A081000
Size:	12288

Details

Name:	00000014.00000003.390041345.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000028.00000002.508765158.00007FF563D9F000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D9F000
Size:	12288

Details

Name:	00000019.00000003.414432078.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.352929106.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000003.395986006.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	20480

Details

Name:	0000001F.00000003.420762967.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	8192

Details

Name:	0000001B.00000003.425749838.0000000000553000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	553000
Size:	24576

Details

Name:	00000005.00000002.363481583.00007FF5C319B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C319B000
Size:	12288

Details

Name:	0000002A.00000002.578164162.00007FF5ED904000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED904000
Size:	4096

Details

Name:	00000026.00000002.466206611.0000024187E81000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E81000
Size:	32768

Details

Name:	00000019.00000002.418433474.0000000003440000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3440000
Size:	65536

Details

Name:	00000014.00000003.402757307.0000000003DD1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD1000
Size:	24576

Details

Name:	0000001F.00000002.440321633.0000000005520000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5520000
Size:	8192

Details

Name:	00000012.00000000.370637166.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	00000026.00000002.466799384.00007FF559FCD000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559FCD000
Size:	4096

Details

Name:	0000000F.00000002.370835309.0000000000FBD000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FBD000
Size:	8192

Details

Name:	00000006.00000003.355274984.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.357608371.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	65536

Details

Name:	0000001B.00000003.410258644.0000000003D21000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D21000
Size:	217088

Details

Name:	0000001F.00000003.416909534.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000001F.00000003.417336738.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	0000001B.00000003.407106698.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000019.00000002.417303341.000000000193C000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	193C000
Size:	4096

Details

Name:	00000019.00000002.415064404.00000000007FA000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA000
Size:	4096

Details

Name:	0000001F.00000003.438139749.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000004.00000002.361431523.00000000FF110000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF110000
Size:	20480

Details

Name:	0000000D.00000002.366872339.00000000FF9D2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D2000
Size:	4096

Details

Name:	00000000.00000003.328688251.00000000072B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72B1000
Size:	151552

Details

Name:	00000015.00000002.398656989.0000013E72A90000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A90000
Size:	4096

Details

Name:	00000028.00000002.508507723.00007FF563CE5000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563CE5000
Size:	20480

Details

Name:	0000001F.00000003.418373203.000000000118F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	118F000
Size:	57344

Details

Name:	00000006.00000003.364274630.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	32768

Details

Name:	00000006.00000002.573258471.0000000000722000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	722000
Size:	28672

Details

Name:	00000005.00000002.362496792.0000003D0817F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D0817F000
Size:	4096

Details

Name:	00000006.00000003.354874882.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000002.439445864.00000000010D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10D0000
Size:	65536

Details

Name:	0000001F.00000002.440815315.000000007FDF2000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF2000
Size:	4096

Details

Name:	00000006.00000002.576145707.0000000002CB0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB0000
Size:	4096

Details

Name:	0000001F.00000003.417825515.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000019.00000002.417866027.0000000003217000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3217000
Size:	8192

Details

Name:	00000026.00000002.466575695.00007DF567E62000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E62000
Size:	4096

Details

Name:	00000006.00000003.486554404.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000F.00000002.370529396.00000000008EB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8EB000
Size:	4096

Details

Name:	00000019.00000003.398060099.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000002.399143845.00007FF57D055000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D055000
Size:	8192

Details

Name:	0000001B.00000003.410707587.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000019.00000003.397214952.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	4096

Details

Name:	00000029.00000002.489454289.00007FF5534B3000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5534B3000
Size:	24576

Details

Name:	00000006.00000003.359827473.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.354967965.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000016.00000000.390699681.00000000FF9C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9C2000
Size:	4096

Details

Name:	00000004.00000003.358027575.00000000036A7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A7000
Size:	8192

Details

Name:	00000012.00000002.574735417.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	00000006.00000003.417500046.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	0000000F.00000000.368689721.00000000007F2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2000
Size:	28672

Details

Name:	00000019.00000003.395386973.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	0000002A.00000002.576837148.00000267CBCF6000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCF6000
Size:	16384

Details

Name:	00000016.00000000.390515259.00000000003F1000.00000020.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000014.00000003.386537088.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000028.00000002.507639273.000002AC2D2E3000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2E3000
Size:	40960

Details

Name:	00000006.00000002.573985825.0000000001170000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1170000
Size:	16384

Details

Name:	0000001B.00000003.426794654.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	00000006.00000003.491070657.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001B.00000003.411091740.0000000003D89000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D89000
Size:	221184

Details

Name:	00000000.00000000.306802298.0000000000500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	500000
Size:	102400

Details

Name:	0000002A.00000002.575011437.00000267C66A0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C66A0000
Size:	4096

Details

Name:	00000028.00000003.491863457.000002AC2DB90000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB90000
Size:	32768

Details

Name:	00000022.00000002.442132728.0000004E023FB000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E023FB000
Size:	20480

Details

Name:	00000028.00000002.508443602.00007FF563C5D000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C5D000
Size:	4096

Details

Name:	0000001F.00000003.425082418.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000004.00000003.356958966.00000000036AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36AB000
Size:	528384

Details

Name:	0000001F.00000003.418091333.00000000054F0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F0000
Size:	49152

Details

Name:	00000014.00000003.400780725.0000000003E61000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E61000
Size:	65536

Details

Name:	00000014.00000000.372526957.0000000000CB0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	CB0000
Size:	102400

Details

Name:	00000029.00000003.488306938.00000199BA150000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA150000
Size:	8192

Details

Name:	00000000.00000003.307787108.0000000000F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9D000
Size:	4096

Details

Name:	00000006.00000003.518075926.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	4096

Details

Name:	00000005.00000002.363196311.00007FF5C301D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C301D000
Size:	4096

Details

Name:	0000002A.00000002.575802009.00000267C76D0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C76D0000
Size:	65536

Details

Name:	0000002A.00000002.577835096.00007FF5ED786000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED786000
Size:	8192

Details

Name:	00000015.00000002.399214299.00007FF57D0A2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D0A2000
Size:	4096

Details

Name:	0000002D.00000002.573828049.0000028B30287000.00000004.00000020.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	28B30287000
Size:	417792

Details

Name:	0000001F.00000003.420483722.0000000005780000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5780000
Size:	24576

Details

Name:	00000019.00000003.399637812.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	8192

Details

Name:	0000002A.00000002.576254817.00000267CBC2F000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC2F000
Size:	57344

Details

Name:	00000015.00000000.386708044.00007FF57D3D1000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3D1000
Size:	16384

Details

Name:	0000002A.00000002.576118753.00000267CBC00000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC00000
Size:	57344

Details

Name:	00000014.00000002.405299770.0000000003F70000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3F70000
Size:	8192

Details

Name:	0000001B.00000003.415287010.0000000003DBE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DBE000
Size:	4096

Details

Name:	00000004.00000003.357872376.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	00000006.00000003.354691964.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001B.00000003.414276919.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000001B.00000002.427986836.00000000004D0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D0000
Size:	4096

Details

Name:	0000002A.00000002.576159325.00000267CBC10000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC10000
Size:	61440

Details

Name:	00000004.00000002.359900780.0000000000880000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	880000
Size:	102400

Details

Name:	0000002D.00000002.573715624.0000028B301D0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B301D0000
Size:	4096

Details

Name:	00000000.00000003.328826574.0000000000FE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE3000
Size:	65536

Details

Name:	00000005.00000002.363386017.00007FF5C315F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C315F000
Size:	12288

Details

Name:	00000019.00000003.396441740.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000000F.00000002.371061333.0000000003C11000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C11000
Size:	8192

Details

Name:	00000019.00000003.397090355.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001B.00000003.426840398.00000000004F0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F0000
Size:	24576

Details

Name:	00000026.00000000.451871420.00007DF567E80000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E80000
Size:	12288

Details

Name:	0000001F.00000003.421363925.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	28672

Details

Name:	0000002A.00000002.573523859.000000A9456FF000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9456FF000
Size:	4096

Details

Name:	00000006.00000003.356653291.0000000005760000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5760000
Size:	16384

Details

Name:	0000000A.00000002.366085291.0000000000F30000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F30000
Size:	40960

Details

Name:	00000015.00000000.386700377.00007FF56850B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56850B000
Size:	4096

Details

Name:	0000001C.00000003.407013243.00000000056F0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	16384

Details

Name:	00000019.00000003.401421123.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	16384

Details

Name:	00000006.00000002.573934880.000000000115F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	115F000
Size:	4096

Details

Name:	00000006.00000003.354757571.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000028.00000002.508422537.00007FF563C45000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C45000
Size:	12288

Details

Name:	00000006.00000003.538820018.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	0000002A.00000002.575389083.00000267C6DD3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6DD3000
Size:	4096

Details

Name:	00000005.00000000.350798238.00007DF5D0ED0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0ED0000
Size:	12288

Details

Name:	00000028.00000002.507983665.000002AC2DB52000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB52000
Size:	135168

Details

Name:	00000014.00000003.401195566.0000000003DEF000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DEF000
Size:	28672

Details

Name:	00000006.00000003.448556993.00000000013E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E0000
Size:	20480

Details

Name:	0000001B.00000003.406471795.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000014.00000003.387386493.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000028.00000003.484235662.000002AC2DB83000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB83000
Size:	32768

Details

Name:	00000014.00000003.401384092.0000000003E5E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E5E000
Size:	8192

Details

Name:	00000006.00000002.574337658.00000000011DD000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11DD000
Size:	4096

Details

Name:	00000019.00000003.396465419.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000006.00000003.362803115.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000002.416160497.00000000014BA000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14BA000
Size:	4096

Details

Name:	0000001B.00000003.426016295.000000000055E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55E000
Size:	8192

Details

Name:	0000001B.00000003.426892607.00000000004F9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	8192

Details

Name:	00000004.00000002.361185398.00000000042EE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42EE000
Size:	8192

Details

Name:	00000006.00000003.352431322.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	180224

Details

Name:	00000014.00000002.404441486.0000000002720000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2720000
Size:	4096

Details

Name:	00000015.00000002.397812645.0000013E70AD0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70AD0000
Size:	16384

Details

Name:	00000000.00000003.333391407.0000000000F27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F27000
Size:	4096

Details

Name:	00000006.00000003.540917759.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	0000001F.00000003.418765125.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	24576

Details

Name:	0000001F.00000003.418861973.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	12288

Details

Name:	00000029.00000002.489630375.00007FF553551000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553551000
Size:	12288

Details

Name:	00000004.00000002.360442220.00000000011C0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	00000006.00000002.580940917.0000000005A2E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A2E000
Size:	4096

Details

Name:	0000001F.00000003.438620837.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000004.00000003.346523183.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000004.00000002.360193559.0000000000A63000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A63000
Size:	4096

Details

Name:	00000006.00000003.459808031.00000000050BD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BD000
Size:	20480

Details

Name:	0000001F.00000002.440238849.0000000005430000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5430000
Size:	4096

Details

Name:	0000002A.00000002.578500508.00007FF5ED9BE000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9BE000
Size:	28672

Details

Name:	00000019.00000002.418499310.0000000003460000.00000040.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	3460000
Size:	4096

Details

Name:	00000019.00000002.417922881.0000000003220000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3220000
Size:	16384

Details

Name:	00000004.00000002.359828729.000000000049B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Details

Name:	00000019.00000003.400751148.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	00000014.00000003.387621970.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000012.00000002.573750702.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	0000002A.00000002.578181689.00007FF5ED90B000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED90B000
Size:	8192

Details

Name:	00000012.00000000.394473277.00007FF5B1993000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1993000
Size:	28672

Details

Name:	00000004.00000002.360169810.0000000000A5F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A5F000
Size:	8192

Details

Name:	00000006.00000003.358666870.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	4096

Details

Name:	00000006.00000003.471323509.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000019.00000002.420890609.0000000005C50000.00000040.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5C50000
Size:	4096

Details

Name:	0000001F.00000002.439714773.0000000001370000.00000040.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1370000
Size:	4096

Details

Name:	00000019.00000002.415301277.0000000000A8A000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A8A000
Size:	24576

Details

Name:	0000001F.00000003.425977465.00000000057E0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57E0000
Size:	65536

Details

Name:	00000014.00000003.386641557.0000000004C00000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C00000
Size:	53248

Details

Name:	00000019.00000003.400522468.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002A.00000002.574925280.00000267C6691000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6691000
Size:	4096

Details

Name:	0000001F.00000003.420159265.000000000118F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	118F000
Size:	57344

Details

Name:	00000006.00000003.353963385.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000000.00000002.334074265.0000000007280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7280000
Size:	4096

Details

Name:	00000006.00000003.364043629.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	8192

Details

Name:	00000006.00000003.364087096.00000000058F0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58F0000
Size:	65536

Details

Name:	00000012.00000002.574415510.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	00000019.00000003.396661747.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.359415772.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000002.418218305.0000000003260000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3260000
Size:	65536

Details

Name:	00000006.00000002.581443253.000000000697C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	697C000
Size:	16384

Details

Name:	00000026.00000002.465639288.000000F4518FB000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F4518FB000
Size:	20480

Details

Name:	00000006.00000002.579996614.0000000005670000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5670000
Size:	4096

Details

Name:	00000015.00000002.397922378.0000013E70B98000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70B98000
Size:	122880

Details

Name:	0000001F.00000002.439480989.00000000010EF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10EF000
Size:	4096

Details

Name:	0000002A.00000002.578532186.00007FF5ED9C7000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9C7000
Size:	49152

Details

Name:	00000005.00000002.362394322.0000003D078BB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D078BB000
Size:	20480

Details

Name:	00000019.00000003.414253797.0000000005D60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	36864

Details

Name:	00000006.00000002.574195406.00000000011B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11B0000
Size:	8192

Details

Name:	00000029.00000002.489665974.00007FF553561000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553561000
Size:	16384

Details

Name:	00000000.00000003.333323802.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	8192

Details

Name:	0000000F.00000003.370229606.0000000002AE0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AE0000
Size:	65536

Details

Name:	00000028.00000003.482056475.000002AC2DB92000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB92000
Size:	57344

Details

Name:	00000000.00000003.330313585.0000000000F95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F95000
Size:	24576

Details

Name:	0000002A.00000002.578225073.00007FF5ED93F000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED93F000
Size:	32768

Details

Name:	00000006.00000003.359870646.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	00000006.00000002.573524753.0000000000897000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	897000
Size:	8192

Details

Name:	0000001C.00000002.407547785.00000000010CA000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10CA000
Size:	4096

Details

Name:	00000005.00000002.362533407.00000202D2310000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2310000
Size:	102400

Details

Name:	00000026.00000002.465543622.000000F45167D000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F45167D000
Size:	12288

Details

Name:	00000000.00000002.333600577.00000000008BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8BA000
Size:	28672

Details

Name:	00000015.00000000.386639128.00007DF58B030000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B030000
Size:	4096

Details

Name:	00000006.00000003.478500764.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	00000000.00000003.307805793.0000000000F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9D000
Size:	4096

Details

Name:	00000019.00000003.395201987.0000000001576000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1576000
Size:	24576

Details

Name:	0000000F.00000002.370637869.0000000000CC0000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	CC0000
Size:	20480

Details

Name:	00000022.00000002.443093507.00007FF54DBB9000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBB9000
Size:	8192

Details

Name:	00000022.00000002.442730714.00007DF55B912000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B912000
Size:	4096

Details

Name:	00000006.00000003.364770666.0000000006980000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6980000
Size:	12288

Details

Name:	0000000A.00000003.365430633.0000000005020000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5020000
Size:	16384

Details

Name:	00000012.00000002.574315071.00007FF5B14C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B14C0000
Size:	4096

Details

Name:	0000001F.00000003.425250273.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000001F.00000002.439215688.000000000100E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	0000000F.00000002.370491695.00000000008DB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8DB000
Size:	8192

Details

Name:	00000019.00000003.395310219.000000000156E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	156E000
Size:	32768

Details

Name:	00000004.00000003.358574775.00000000036C2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C2000
Size:	4096

Details

Name:	0000001B.00000000.396491690.00000000003F0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	0000001B.00000003.426585301.00000000004DD000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD000
Size:	8192

Details

Name:	00000012.00000002.574446143.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	0000001F.00000003.418697616.0000000005520000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5520000
Size:	65536

Details

Name:	00000000.00000002.333738140.0000000000D00000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D00000
Size:	4096

Details

Name:	00000019.00000002.420733848.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	12288

Details

Name:	00000006.00000003.405834718.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	0000001F.00000003.417755523.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000005.00000002.363506891.00007FF5C31AE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C31AE000
Size:	4096

Details

Name:	00000019.00000002.415128733.00000000008A1000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8A1000
Size:	4096

Details

Name:	00000012.00000000.394395304.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	0000002A.00000002.578575041.00007FF5ED9E2000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9E2000
Size:	40960

Details

Name:	00000006.00000003.353024814.000000000135E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	135E000
Size:	16384

Details

Name:	00000028.00000002.508030287.000002AC2DB83000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB83000
Size:	20480

Details

Name:	0000001B.00000003.426647379.0000000000506000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	506000
Size:	8192

Details

Name:	0000001B.00000003.426950463.0000000000509000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	509000
Size:	8192

Details

Name:	00000019.00000003.398471997.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.364615363.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000005.00000002.362774092.00000202D2471000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2471000
Size:	65536

Details

Name:	00000000.00000003.330177018.0000000000F72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F72000
Size:	139264

Details

Name:	00000019.00000003.398603223.0000000001524000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1524000
Size:	40960

Details

Name:	00000028.00000003.483656537.000002AC2DBA6000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA6000
Size:	49152

Details

Name:	0000001C.00000002.407290901.0000000000EA2000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA2000
Size:	28672

Details

Name:	00000004.00000002.360110355.00000000009EE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9EE000
Size:	8192

Details

Name:	00000006.00000002.574158917.00000000011A0000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11A0000
Size:	20480

Details

Name:	00000015.00000002.398624614.0000013E72A86000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A86000
Size:	24576

Details

Name:	00000028.00000003.493603238.000002AC2DBC3000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBC3000
Size:	61440

Details

Name:	0000001B.00000003.410964853.0000000003D21000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D21000
Size:	217088

Details

Name:	00000029.00000003.488242152.00000199BA14D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14D000
Size:	20480

Details

Name:	00000012.00000000.394280096.00007DF5BF6F2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F2000
Size:	4096

Details

Name:	00000006.00000003.406193151.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	00000019.00000003.396786668.0000000005930000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5930000
Size:	20480

Details

Name:	0000001B.00000003.426396214.00000000004F0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F0000
Size:	24576

Details

Name:	0000002D.00000002.574503266.0000028B30760000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B30760000
Size:	4096

Details

Name:	0000001F.00000002.440726347.000000000636F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	636F000
Size:	4096

Details

Name:	0000001F.00000002.438892607.000000000038A000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	38A000
Size:	4096

Details

Name:	00000015.00000002.399243104.00007FF57D0B4000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D0B4000
Size:	20480

Details

Name:	00000006.00000003.381959888.00000000071B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B0000
Size:	16384

Details

Name:	00000006.00000003.364285502.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	12288

Details

Name:	00000014.00000003.401919111.0000000003E14000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E14000
Size:	57344

Details

Name:	00000019.00000003.401600188.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	16384

Details

Name:	00000006.00000003.353364744.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000028.00000002.507696512.000002AC2D313000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D313000
Size:	8192

Details

Name:	0000001B.00000003.426436676.000000000052C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	4096

Details

Name:	00000028.00000003.486959854.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	53248

Details

Name:	0000001C.00000002.407697096.0000000001553000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1553000
Size:	4096

Details

Name:	00000000.00000003.329105526.0000000007281000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7281000
Size:	196608

Details

Name:	00000028.00000003.489473981.000002AC2DB87000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB87000
Size:	32768

Details

Name:	00000000.00000002.334062210.0000000007180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7180000
Size:	4096

Details

Name:	00000019.00000003.414445993.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000000A.00000002.366375388.0000000004E30000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4E30000
Size:	8192

Details

Name:	0000001F.00000002.439878904.0000000001720000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1720000
Size:	69632

Details

Name:	0000001F.00000003.415968739.00000000011C3000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C3000
Size:	16384

Details

Name:	0000001B.00000002.428066205.000000000052C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	4096

Details

Name:	00000014.00000003.400453490.0000000003E59000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E59000
Size:	147456

Details

Name:	00000014.00000002.405260302.0000000003F49000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F49000
Size:	4096

Details

Name:	0000000D.00000002.366857024.0000000000EC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EC0000
Size:	4096

Details

Name:	00000014.00000002.404499803.0000000002780000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2780000
Size:	36864

Details

Name:	00000015.00000002.400209963.00007FF57D3C1000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3C1000
Size:	32768

Details

Name:	00000022.00000002.442304913.0000017AD1D50000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD1D50000
Size:	12288

Details

Name:	00000019.00000002.417805059.000000000320B000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	320B000
Size:	32768

Details

Name:	00000028.00000002.507585677.000002AC2D2C3000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2C3000
Size:	36864

Details

Name:	00000006.00000003.356962015.0000000005751000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	57344

Details

Name:	00000014.00000003.402734223.0000000003DF9000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF9000
Size:	8192

Details

Name:	00000006.00000000.351219501.0000000000722000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	722000
Size:	28672

Details

Name:	00000012.00000000.370463690.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000028.00000002.507663971.000002AC2D2FB000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D2FB000
Size:	24576

Details

Name:	00000015.00000002.399567513.00007FF57D29B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D29B000
Size:	8192

Details

Name:	0000002A.00000002.577124814.00007DF5FB700000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB700000
Size:	4096

Details

Name:	00000028.00000003.506591176.000002AC2D255000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D255000
Size:	8192

Details

Name:	0000002D.00000002.575271008.00007FF5ED30C000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED30C000
Size:	16384

Details

Name:	0000002A.00000002.578557966.00007FF5ED9DB000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9DB000
Size:	12288

Details

Name:	00000006.00000003.364967998.0000000005915000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5915000
Size:	12288

Details

Name:	00000019.00000003.395300071.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	00000014.00000003.402948072.0000000003E7E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E7E000
Size:	20480

Details

Name:	0000001C.00000003.406926909.0000000005700000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5700000
Size:	65536

Details

Name:	0000002A.00000002.575491479.00000267C6E15000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6E15000
Size:	4096

Details

Name:	0000001B.00000003.426099076.0000000000527000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	527000
Size:	57344

Details

Name:	00000019.00000002.415726891.000000000131E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131E000
Size:	8192

Details

Name:	00000000.00000003.328793476.00000000072E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72E1000
Size:	8192

Details

Name:	0000002A.00000002.575406235.00000267C6DE0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6DE0000
Size:	4096

Details

Name:	00000000.00000002.333643609.00000000008FA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8FA000
Size:	24576

Details

Name:	00000026.00000000.451829808.00007DF567E62000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E62000
Size:	4096

Details

Name:	00000028.00000003.489507515.000002AC2DB91000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB91000
Size:	32768

Details

Name:	00000006.00000003.352631712.0000000001354000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1354000
Size:	24576

Details

Name:	0000000A.00000002.366381491.0000000005030000.00000040.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5030000
Size:	4096

Details

Name:	00000015.00000003.387875366.0000013E72A7E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A7E000
Size:	61440

Details

Name:	00000006.00000003.514038674.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000014.00000002.403938078.00000000014D0000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14D0000
Size:	20480

Details

Name:	00000012.00000000.370216515.0000024B7C830000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	24B7C830000
Size:	4096

Details

Name:	00000022.00000002.442155090.0000004E0247F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E0247F000
Size:	4096

Details

Name:	00000006.00000002.579558964.0000000005080000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5080000
Size:	45056

Details

Name:	00000012.00000000.370315371.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	00000006.00000003.500562848.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000A.00000002.366075109.0000000000F20000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F20000
Size:	8192

Details

Name:	0000001F.00000003.417792966.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.357050304.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	16384

Details

Name:	00000028.00000002.508007175.000002AC2DB76000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB76000
Size:	12288

Details

Name:	00000006.00000003.354121534.0000000005625000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5625000
Size:	8192

Details

Name:	0000001F.00000003.415842877.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000028.00000003.488642501.000002AC2DBAC000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBAC000
Size:	32768

Details

Name:	0000001B.00000003.425990368.0000000000556000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	556000
Size:	12288

Details

Name:	00000014.00000000.372572780.00000000FF642000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF642000
Size:	4096

Details

Name:	00000019.00000003.396147959.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000026.00000002.467213784.00007FF55A1D2000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1D2000
Size:	12288

Details

Name:	0000001C.00000002.407496325.00000000010BA000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10BA000
Size:	8192

Details

Name:	00000019.00000002.417847294.0000000003214000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3214000
Size:	8192

Details

Name:	00000019.00000003.396307798.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000005.00000002.362444436.0000003D07E7F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D07E7F000
Size:	4096

Details

Name:	00000015.00000002.398967708.00007FF57CE4C000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CE4C000
Size:	8192

Details

Name:	0000001F.00000003.416354006.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	24576

Details

Name:	0000002D.00000003.549675224.0000028B302CE000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28B302CE000
Size:	4096

Details

Name:	00000006.00000003.357961916.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000A.00000002.366222737.0000000002737000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2737000
Size:	4096

Details

Name:	00000012.00000000.370488217.00007DF5BF6F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6F0000
Size:	4096

Details

Name:	00000000.00000002.334087970.000000007F750000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F750000
Size:	20480

Details

Name:	00000012.00000000.394678370.00007FF5B1A7A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A7A000
Size:	4096

Details

Name:	0000001C.00000002.408310301.0000000005880000.00000040.00000040.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	5880000
Size:	4096

Details

Name:	00000026.00000002.466680780.00007FF559CE1000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559CE1000
Size:	20480

Details

Name:	0000001B.00000003.427022393.00000000004D8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D8000
Size:	8192

Details

Name:	0000002D.00000002.574941725.00007DF4F8FD0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4F8FD0000
Size:	20480

Details

Name:	00000022.00000002.442359631.0000017AD1DB0000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1DB0000
Size:	4096

Details

Name:	00000014.00000003.400655586.0000000003E4B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E4B000
Size:	57344

Details

Name:	0000001B.00000003.419735633.00000000004E1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E1000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000006.00000002.573337685.0000000000760000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	760000
Size:	102400

Details

Name:	00000000.00000003.333308891.0000000000FE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE4000
Size:	61440

Details

Name:	00000006.00000002.576299142.0000000002D3E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D3E000
Size:	8192

Details

Name:	00000006.00000003.359458491.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000002.403404514.0000000000482000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	482000
Size:	20480

Details

Name:	00000006.00000002.576824260.0000000002F66000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F66000
Size:	5337088

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000029.00000002.488513709.0000000257B0A000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257B0A000
Size:	24576

Details

Name:	00000026.00000000.451843824.00007DF567E70000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E70000
Size:	4096

Details

Name:	00000012.00000000.370208826.0000024B7C820000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	24B7C820000
Size:	4096

Details

Name:	00000005.00000002.363322114.00007FF5C30D5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C30D5000
Size:	4096

Details

Name:	0000001C.00000002.408082461.000000000183E000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	183E000
Size:	8192

Details

Name:	00000014.00000002.404877094.0000000003E39000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E39000
Size:	45056

Details

Name:	0000001F.00000003.425864276.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	8192

Details

Name:	00000012.00000000.394034025.0000024B7C990000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	00000006.00000003.355800880.0000000001368000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1368000
Size:	36864

Details

Name:	00000028.00000002.507854246.000002AC2DB00000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB00000
Size:	98304

Details

Name:	0000001F.00000002.439002069.0000000000427000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	427000
Size:	4096

Details

Name:	00000006.00000003.357840212.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	8192

Details

Name:	0000001F.00000002.440462371.0000000005780000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5780000
Size:	36864

Details

Name:	0000002A.00000003.526131146.00000267C6F58000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6F58000
Size:	8192

Details

Name:	00000019.00000003.400227530.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	8192

Details

Name:	00000019.00000002.416310177.00000000014CB000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14CB000
Size:	4096

Details

Name:	0000000F.00000002.370601899.0000000000A8C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A8C000
Size:	16384

Details

Name:	00000012.00000002.574798202.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	00000006.00000003.484360994.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000028.00000003.485720809.000002AC2DB91000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB91000
Size:	32768

Details

Name:	00000014.00000002.403963378.00000000014D7000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14D7000
Size:	159744

Details

Name:	00000014.00000003.395136239.0000000004C9E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C9E000
Size:	4096

Details

Name:	00000022.00000002.442703403.00007DF55B910000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B910000
Size:	4096

Details

Name:	00000019.00000003.395774526.0000000003285000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3285000
Size:	8192

Details

Name:	00000022.00000002.442972480.00007FF54DB05000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB05000
Size:	20480

Details

Name:	0000000A.00000002.365903851.00000000007F0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	16384

Details

Name:	0000002A.00000002.577924261.00007FF5ED7D4000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7D4000
Size:	4096

Details

Name:	00000012.00000000.394434303.00007FF5B198F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198F000
Size:	12288

Details

Name:	00000006.00000003.352715140.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	180224

Details

Name:	00000006.00000002.576443742.0000000002E94000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E94000
Size:	8192

Details

Name:	00000019.00000003.399807209.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000028.00000003.484267553.000002AC2DB95000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB95000
Size:	8192

Details

Name:	00000019.00000002.415812394.0000000001340000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1340000
Size:	16384

Details

Name:	00000029.00000000.476653248.00007DF5611C0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611C0000
Size:	4096

Details

Name:	00000006.00000003.520017410.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000002A.00000002.576784028.00000267CBCE3000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCE3000
Size:	4096

Details

Name:	0000000A.00000003.365339769.0000000004EC4000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EC4000
Size:	45056

Details

Name:	00000019.00000003.400986532.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.358397876.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	49152

Details

Name:	0000001F.00000002.438877643.0000000000382000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	382000
Size:	28672

Details

Name:	00000006.00000003.352540198.00000000011F4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11F4000
Size:	4096

Details

Name:	0000000A.00000003.365204622.0000000004EB0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB0000
Size:	45056

Details

Name:	00000019.00000002.420973706.00000000063AE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	63AE000
Size:	8192

Details

Name:	00000015.00000003.396788603.0000013E72A7E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A7E000
Size:	16384

Details

Name:	00000000.00000003.329022524.0000000000F6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6D000
Size:	16384

Details

Name:	00000028.00000000.475180687.00007DF571B00000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B00000
Size:	4096

Details

Name:	00000019.00000003.396119552.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000015.00000002.399395392.00007FF57D23C000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D23C000
Size:	16384

Details

Name:	00000004.00000003.358840212.0000000003699000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3699000
Size:	4096

Details

Name:	0000001B.00000002.428354384.0000000000C00000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C00000
Size:	733184

Details

Name:	00000000.00000003.307797550.0000000000F42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F42000
Size:	16384

Details

Name:	0000001B.00000003.410301407.0000000003D3B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D3B000
Size:	331776

Details

Name:	00000019.00000002.418130509.0000000003245000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3245000
Size:	12288

Details

Name:	00000006.00000003.534735081.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000029.00000002.489416651.00007FF5534AB000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5534AB000
Size:	12288

Details

Name:	00000004.00000003.357967179.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	00000016.00000002.390843929.00000000003F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000004.00000003.358243036.00000000036A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	4096

Details

Name:	00000014.00000003.401615290.0000000003E2D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2D000
Size:	32768

Details

Name:	0000001F.00000002.440492378.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	4096

Details

Name:	00000000.00000003.307665991.0000000000F57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F57000
Size:	32768

Details

Name:	00000028.00000002.508268699.00007FF563B15000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563B15000
Size:	8192

Details

Name:	00000006.00000002.575636905.0000000001510000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1510000
Size:	36864

Details

Name:	00000014.00000003.401807554.0000000003E25000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E25000
Size:	8192

Details

Name:	00000014.00000003.402897623.0000000003F49000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F49000
Size:	4096

Details

Name:	00000012.00000002.574822843.00007FF5B1A64000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A64000
Size:	20480

Details

Name:	00000006.00000003.357649547.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000019.00000002.418983474.0000000005470000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5470000
Size:	4096

Details

Name:	00000015.00000003.397411614.0000013E72A85000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A85000
Size:	28672

Details

Name:	0000000F.00000003.370208439.0000000002AF0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF0000
Size:	65536

Details

Name:	0000001F.00000002.439037893.0000000000436000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	436000
Size:	4096

Details

Name:	00000026.00000002.466588871.00007DF567E70000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E70000
Size:	4096

Details

Name:	00000019.00000003.400564480.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001F.00000003.438444770.0000000005810000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5810000
Size:	65536

Details

Name:	0000002A.00000002.578720548.00007FF5EDA74000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA74000
Size:	20480

Details

Name:	00000004.00000000.333084751.00000000FF230000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF230000
Size:	12288

Details

Name:	0000002A.00000002.577615376.00007FF5ED5F7000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED5F7000
Size:	4096

Details

Name:	00000026.00000002.467126623.00007FF55A14B000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A14B000
Size:	12288

Details

Name:	00000028.00000003.480704886.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	4096

Details

Name:	00000000.00000002.334069496.0000000007274000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7274000
Size:	8192

Details

Name:	0000002D.00000000.548997127.0000028B301A0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B301A0000
Size:	102400

Details

Name:	00000004.00000003.346597150.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000028.00000002.508052253.00007DF46F9C0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF46F9C0000
Size:	20480

Details

Name:	00000014.00000003.390124994.0000000003EA4000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA4000
Size:	73728

Details

Name:	00000019.00000002.418069268.0000000003231000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3231000
Size:	49152

Details

Name:	00000012.00000002.574581039.00007FF5B19A3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A3000
Size:	12288

Details

Name:	00000005.00000002.362793873.00000202D248D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D248D000
Size:	20480

Details

Name:	00000004.00000003.351461711.0000000003785000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3785000
Size:	4096

Details

Name:	00000022.00000002.442233226.0000017AD1D10000.00000004.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	17AD1D10000
Size:	4096

Details

Name:	00000004.00000002.361455105.00000000FF210000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF210000
Size:	4096

Details

Name:	00000028.00000003.480616057.000002AC2DB6C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB6C000
Size:	16384

Details

Name:	00000028.00000002.508484970.00007FF563CA2000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563CA2000
Size:	8192

Details

Name:	0000001F.00000003.416034239.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000002A.00000002.576866683.00000267CBE00000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBE00000
Size:	4096

Details

Name:	00000029.00000002.488731796.00000199BA110000.00000004.00000020.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	199BA110000
Size:	69632

Details

Name:	00000019.00000003.396635528.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000000.386657948.00007DF58B040000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B040000
Size:	4096

Details

Name:	00000004.00000003.350420421.000000000377D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	377D000
Size:	4096

Details

Name:	0000002A.00000002.577543046.00007FF5ED237000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED237000
Size:	4096

Details

Name:	00000004.00000003.357559794.0000000003712000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3712000
Size:	28672

Details

Name:	00000006.00000003.492946235.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001F.00000003.425607484.00000000011DE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DE000
Size:	98304

Details

Name:	00000006.00000002.580427027.0000000005900000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5900000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara signature match	System Summary

Details

Name:	0000000F.00000002.370899236.00000000011A0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11A0000
Size:	65536

Details

Name:	00000006.00000003.356290459.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	65536

Details

Name:	00000006.00000003.361055808.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000002A.00000002.578800248.00007FF5EDA8A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA8A000
Size:	4096

Details

Name:	0000001F.00000000.412697673.00000000003C0000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3C0000
Size:	102400

Details

Name:	0000001F.00000002.439857037.000000000151E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	151E000
Size:	8192

Details

Name:	0000001C.00000002.407476960.0000000000FF0000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF0000
Size:	16384

Details

Name:	0000001C.00000002.407442079.0000000000FDE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FDE000
Size:	8192

Details

Name:	0000001F.00000003.438428693.0000000005820000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5820000
Size:	36864

Details

Name:	00000028.00000002.508966130.00007FF563E07000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E07000
Size:	8192

Details

Name:	0000002A.00000002.575872687.00000267C76E0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C76E0000
Size:	65536

Details

Name:	00000015.00000002.399813960.00007FF57D2F7000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2F7000
Size:	16384

Details

Name:	0000000A.00000002.366273331.00000000027BE000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27BE000
Size:	8192

Details

Name:	00000004.00000003.358233244.00000000036B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B0000
Size:	20480

Details

Name:	00000028.00000002.507841884.000002AC2DA02000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DA02000
Size:	4096

Details

Name:	00000006.00000003.359554489.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	32768

Details

Name:	0000001B.00000002.427653155.0000000000389000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	389000
Size:	4096

Details

Name:	00000012.00000000.370669316.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000028.00000000.475097812.000002AC2D090000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D090000
Size:	102400

Details

Name:	0000000F.00000000.368717846.0000000000A30000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	102400

Details

Name:	00000006.00000003.485899101.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000014.00000003.391759563.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000022.00000002.443339955.00007FF54DC27000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC27000
Size:	8192

Details

Name:	0000001B.00000003.419992537.00000000004E4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E4000
Size:	557056

Details

Name:	00000028.00000003.477791359.000002AC2D900000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D900000
Size:	4096

Details

Name:	00000014.00000002.403431649.000000000049B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Details

Name:	00000026.00000003.465176440.0000024187E89000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E89000
Size:	40960

Details

Name:	00000014.00000003.402538784.0000000003E01000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E01000
Size:	4096

Details

Name:	0000001F.00000002.439767086.00000000013D7000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13D7000
Size:	16384

Details

Name:	00000019.00000003.400507863.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000014.00000000.372566668.00000000FF640000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF640000
Size:	4096

Details

Name:	0000001F.00000003.418236819.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000012.00000002.573622351.0000024B7C990000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7C990000
Size:	4096

Details

Name:	0000001B.00000002.427893037.0000000000481000.00000008.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	481000
Size:	4096

Details

Name:	00000006.00000003.366450765.0000000006986000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6986000
Size:	36864

Details

Name:	0000001C.00000002.407724292.000000000155D000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	155D000
Size:	4096

Details

Name:	00000006.00000002.580742840.0000000005910000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5910000
Size:	12288

Details

Name:	00000014.00000002.403609116.0000000000D10000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D10000
Size:	16384

Details

Name:	0000001B.00000003.411014986.0000000003D56000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D56000
Size:	430080

Details

Name:	00000006.00000003.358843457.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000003.399780020.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.358036561.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	16384

Details

Name:	00000019.00000002.416068988.00000000014B6000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14B6000
Size:	8192

Details

Name:	00000012.00000000.370653533.00007FF5B19F7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19F7000
Size:	8192

Details

Name:	00000004.00000002.361393017.0000000004465000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4465000
Size:	4096

Details

Name:	00000006.00000003.358960536.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.357333567.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000005.00000000.350861030.00007FF5C3251000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3251000
Size:	16384

Details

Name:	0000001F.00000003.420935470.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000012.00000000.370569660.00007FF5B1989000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1989000
Size:	8192

Details

Name:	00000019.00000003.395919520.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	65536

Details

Name:	00000028.00000003.492180236.000002AC2DB8E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8E000
Size:	397312

Details

Name:	00000012.00000000.370608121.00007FF5B19A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A0000
Size:	4096

Details

Name:	00000019.00000000.393841866.00000000007F0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	0000001F.00000002.438903549.00000000003B0000.00000004.00020000.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	3B0000
Size:	4096

Details

Name:	00000004.00000003.346487835.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000001F.00000003.438154757.0000000005810000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5810000
Size:	28672

Details

Name:	00000006.00000002.580231784.00000000057C0000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	57C0000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara signature match	System Summary

Details

Name:	0000002A.00000002.575125745.00000267C66FE000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C66FE000
Size:	12288

Details

Name:	00000015.00000002.400055285.00007FF57D347000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D347000
Size:	8192

Details

Name:	00000006.00000003.353503727.000000000135E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	135E000
Size:	36864

Details

Name:	0000001F.00000002.439406799.00000000010A2000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A2000
Size:	4096

Details

Name:	00000019.00000003.400142681.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	65536

Details

Name:	00000006.00000003.416008251.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	126976

Details

Name:	0000000A.00000002.365976166.0000000000C1A000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C1A000
Size:	131072

Details

Name:	00000019.00000003.398343638.0000000005B80000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B80000
Size:	65536

Details

Name:	00000019.00000003.400425180.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000019.00000002.416370273.00000000014EA000.00000004.00000020.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	14EA000
Size:	122880

Details

Name:	0000001F.00000003.416865033.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000001C.00000002.407409604.0000000000F40000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	16384

Details

Name:	00000004.00000003.358097323.00000000036DE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36DE000
Size:	20480

Details

Name:	00000015.00000003.396827932.0000013E72A78000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A78000
Size:	24576

Details

Name:	0000000F.00000002.370876405.000000000118E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	118E000
Size:	8192

Details

Name:	00000006.00000003.355075537.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000019.00000003.396206441.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000005.00000002.363347348.00007FF5C3159000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3159000
Size:	8192

Details

Name:	0000002A.00000002.576107257.00000267CBAE0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBAE0000
Size:	4096

Details

Name:	0000001B.00000003.426852197.00000000004F9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F9000
Size:	8192

Details

Name:	00000028.00000003.490151672.000002AC2DBAF000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBAF000
Size:	90112

Details

Name:	00000026.00000002.466962986.00007FF55A109000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A109000
Size:	8192

Details

Name:	00000028.00000002.508828746.00007FF563DBE000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DBE000
Size:	28672

Details

Name:	00000019.00000003.396485731.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000003.414120377.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	00000022.00000002.442874446.00007FF54D935000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D935000
Size:	8192

Details

Name:	0000001B.00000003.426974496.00000000004D8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D8000
Size:	8192

Details

Name:	0000000F.00000003.370254382.0000000002AD4000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AD4000
Size:	45056

Details

Name:	00000015.00000003.396973824.0000013E72A73000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A73000
Size:	8192

Details

Name:	0000001F.00000003.417393630.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000004.00000003.358557783.00000000036B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B9000
Size:	8192

Details

Name:	00000006.00000003.448425845.0000000006995000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6995000
Size:	114688

Details

Name:	00000012.00000002.574678122.00007FF5B19CB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19CB000
Size:	12288

Details

Name:	0000002A.00000000.515735067.00007DF5FB700000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB700000
Size:	4096

Details

Name:	0000002A.00000002.578440052.00007FF5ED9B0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9B0000
Size:	4096

Details

Name:	00000006.00000003.356720791.000000000136F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	136F000
Size:	40960

Details

Name:	00000028.00000002.508395331.00007FF563C16000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C16000
Size:	16384

Details

Name:	00000022.00000002.443321990.00007FF54DC0E000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC0E000
Size:	4096

Details

Name:	00000004.00000003.358803368.00000000036B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B9000
Size:	8192

Details

Name:	00000006.00000002.581919330.000000007FF90000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF90000
Size:	4096

Details

Name:	00000028.00000002.508677810.00007FF563D7E000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D7E000
Size:	8192

Details

Name:	00000014.00000003.402800658.0000000003DD6000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD6000
Size:	4096

Details

Name:	0000000D.00000002.366834385.0000000000E50000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E50000
Size:	102400

Details

Name:	0000002D.00000002.575491464.00007FF5ED3F2000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3F2000
Size:	28672

Details

Name:	0000001F.00000003.415996981.00000000011DC000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	8192

Details

Name:	00000004.00000002.360676151.0000000001320000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1320000
Size:	36864

Details

Name:	00000028.00000002.508573642.00007FF563D15000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D15000
Size:	4096

Details

Name:	00000006.00000003.499803303.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000006.00000003.532018131.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	0000001F.00000002.440666349.000000000606F000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	606F000
Size:	4096

Details

Name:	00000028.00000002.508520252.00007FF563CEB000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563CEB000
Size:	24576

Details

Name:	0000001F.00000002.439395416.00000000010A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A0000
Size:	4096

Details

Name:	0000001B.00000002.427567371.00000000002CD000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD000
Size:	12288

Details

Name:	00000022.00000002.443129339.00007FF54DBBF000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBBF000
Size:	12288

Details

Name:	00000019.00000003.395337797.0000000001576000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1576000
Size:	45056

Details

Name:	00000006.00000003.531542623.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000006.00000003.356625829.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	4096

Details

Name:	00000019.00000003.397806233.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	36864

Details

Name:	0000001B.00000003.426423271.000000000050E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50E000
Size:	12288

Details

Name:	00000019.00000001.394540162.00000000007F0000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000026.00000002.465958044.0000024187D70000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24187D70000
Size:	16384

Details

Name:	00000006.00000003.365070066.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	40960

Details

Name:	00000026.00000002.466602180.00007DF567E72000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E72000
Size:	4096

Details

Name:	00000014.00000003.400855719.0000000003E53000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E53000
Size:	24576

Details

Name:	00000004.00000002.360074069.00000000008F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8F0000
Size:	4096

Details

Name:	0000001B.00000003.411575260.00000000040F0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	40F0000
Size:	53248

Details

Name:	0000001B.00000003.411481915.0000000000587000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	4096

Details

Name:	0000001F.00000002.439676916.00000000011DB000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	00000014.00000002.405224613.0000000003F40000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3F40000
Size:	12288

Details

Name:	00000006.00000003.359402851.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000005.00000002.363491269.00007FF5C31A3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C31A3000
Size:	24576

Details

Name:	00000028.00000002.508587617.00007FF563D3F000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D3F000
Size:	4096

Details

Name:	0000000A.00000003.365224114.0000000004EA0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA0000
Size:	8192

Details

Name:	00000000.00000003.329969381.0000000000FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE1000
Size:	4096

Details

Name:	0000002A.00000002.573401429.000000A9453F7000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9453F7000
Size:	36864

Details

Name:	00000022.00000002.443196289.00007FF54DBD7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBD7000
Size:	16384

Details

Name:	0000002A.00000003.516552223.00000267CBBEE000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBBEE000
Size:	73728

Details

Name:	00000015.00000002.400238001.00007FF57D3CA000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D3CA000
Size:	4096

Details

Name:	0000001F.00000002.440014873.0000000002E77000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E77000
Size:	32768

Details

Name:	00000012.00000002.574346299.00007FF5B191B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B191B000
Size:	8192

Details

Name:	00000006.00000002.576629295.0000000002ECC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ECC000
Size:	4096

Details

Name:	00000006.00000003.358493087.00000000057C5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C5000
Size:	12288

Details

Name:	00000004.00000003.359044608.0000000003740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3740000
Size:	20480

Details

Name:	00000006.00000003.353105776.0000000001363000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1363000
Size:	12288

Details

Name:	0000002A.00000002.578279948.00007FF5ED96A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED96A000
Size:	8192

Details

Name:	00000019.00000003.400454611.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000015.00000002.398701394.00007DF58B030000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B030000
Size:	4096

Details

Name:	0000001C.00000002.408328382.000000007F710000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F710000
Size:	20480

Details

Name:	00000026.00000002.467244807.00007FF55A1E4000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1E4000
Size:	20480

Details

Name:	00000004.00000003.358217048.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	00000028.00000002.507174468.000000FA9397B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9397B000
Size:	20480

Details

Name:	0000001B.00000003.413034350.00000000005A6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A6000
Size:	98304

Details

Name:	00000019.00000003.396599028.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000000A.00000002.366181599.0000000002710000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2710000
Size:	8192

Details

Name:	00000015.00000002.397675590.0000001DB89FF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB89FF000
Size:	4096

Details

Name:	00000000.00000002.333670083.0000000000AF5000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AF5000
Size:	16384

Details

Name:	00000006.00000003.355641015.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000022.00000000.421318603.00007DF55B910000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B910000
Size:	4096

Details

Name:	00000022.00000002.442431062.0000017AD1E29000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E29000
Size:	73728

Details

Name:	00000019.00000002.417006431.00000000016DF000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16DF000
Size:	4096

Details

Name:	00000000.00000002.333585671.00000000005FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FE000
Size:	8192

Details

Name:	00000015.00000003.396964124.0000013E72A6E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A6E000
Size:	4096

Details

Name:	00000019.00000002.420828275.0000000005C3E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C3E000
Size:	8192

Details

Name:	00000019.00000003.400441600.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000000A.00000002.365928792.00000000009CE000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9CE000
Size:	4096

Details

Name:	00000006.00000003.353119317.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000006.00000003.358449025.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	00000028.00000003.490189709.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	53248

Details

Name:	00000006.00000003.358091809.0000000005790000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5790000
Size:	36864

Details

Name:	00000028.00000002.508452883.00007FF563C60000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C60000
Size:	4096

Details

Name:	0000001F.00000003.426126205.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	16384

Details

Name:	00000004.00000002.360829237.00000000036EA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	36EA000
Size:	8192

Details

Name:	00000015.00000002.398732415.00007DF58B042000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B042000
Size:	4096

Details

Name:	0000001F.00000003.417906432.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000028.00000003.485939164.000002AC2DBC8000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBC8000
Size:	147456

Details

Name:	00000012.00000000.370661186.00007FF5B19FA000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FA000
Size:	8192

Details

Name:	00000019.00000003.401374816.0000000005C0D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C0D000
Size:	12288

Details

Name:	00000028.00000003.492765562.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	4096

Details

Name:	00000012.00000000.370275358.0000024B7CA00000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA00000
Size:	4096

Details

Name:	00000028.00000003.490264665.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	106496

Details

Name:	0000000F.00000003.370132147.0000000002AC0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC0000
Size:	45056

Details

Name:	00000019.00000003.396253524.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	00000019.00000002.417479431.0000000001950000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1950000
Size:	12288

Details

Name:	00000006.00000003.470776300.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000000.00000002.334065882.00000000071E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	71E1000
Size:	4096

Details

Name:	00000015.00000002.398795817.00007FF56850B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56850B000
Size:	4096

Details

Name:	00000012.00000002.573310821.000000784EB7B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	784EB7B000
Size:	20480

Details

Name:	00000022.00000002.442742046.00007DF55B920000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B920000
Size:	4096

Details

Name:	00000019.00000002.415585431.0000000000BE2000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	BE2000
Size:	98304

Details

Name:	00000028.00000002.508936433.00007FF563DEE000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DEE000
Size:	4096

Details

Name:	00000028.00000003.488750387.000002AC2DB8A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8A000
Size:	131072

Details

Name:	0000001B.00000000.396464787.0000000000050000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	50000
Size:	102400

Details

Name:	00000028.00000003.490827247.000002AC2E06A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E06A000
Size:	425984

Details

Name:	00000029.00000002.489348088.00007FF553480000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF553480000
Size:	4096

Details

Name:	00000029.00000002.489069212.00007DF45F090000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF45F090000
Size:	20480

Details

Name:	00000014.00000002.406591672.00000000FF642000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF642000
Size:	4096

Details

Name:	00000019.00000003.400654302.0000000005BDA000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BDA000
Size:	24576

Details

Name:	0000002D.00000000.549104135.00007DF5FB120000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB120000
Size:	12288

Details

Name:	00000004.00000003.358746154.0000000003694000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3694000
Size:	16384

Details

Name:	0000002A.00000002.575261237.00000267C6C50000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6C50000
Size:	4096

Details

Name:	00000016.00000000.390724083.00000000FF9E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9E0000
Size:	12288

Details

Name:	00000029.00000002.488972072.00000199BA345000.00000004.00000040.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	199BA345000
Size:	8192

Details

Name:	00000019.00000003.396425531.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000001B.00000003.407648222.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000006.00000003.448497392.00000000013AE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13AE000
Size:	4096

Details

Name:	00000004.00000003.357721624.0000000003705000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3705000
Size:	8192

Details

Name:	0000000F.00000002.370818742.0000000000FB0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB0000
Size:	8192

Details

Name:	00000015.00000002.399587193.00007FF57D2AE000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2AE000
Size:	4096

Details

Name:	00000019.00000003.400340773.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	45056

Details

Name:	00000029.00000002.488916817.00000199BA230000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199BA230000
Size:	8192

Details

Name:	00000014.00000003.402171701.0000000003E2C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E2C000
Size:	4096

Details

Name:	00000015.00000003.387983446.0000013E72A83000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A83000
Size:	8192

Details

Name:	0000000A.00000002.365816037.00000000006D0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	102400

Details

Name:	00000012.00000002.574612291.00007FF5B19A7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19A7000
Size:	16384

Details

Name:	00000004.00000002.361001882.0000000003731000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3731000
Size:	8192

Details

Name:	00000005.00000002.362634577.00000202D2390000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2390000
Size:	4096

Details

Name:	0000001F.00000003.415105900.00000000011C7000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C7000
Size:	16384

Details

Name:	0000001F.00000002.440215516.0000000004F80000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F80000
Size:	4096

Details

Name:	0000000A.00000002.366298633.00000000028BE000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28BE000
Size:	8192

Details

Name:	00000022.00000002.442588995.0000017AD1F08000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1F08000
Size:	24576

Details

Name:	00000019.00000003.397256476.0000000001522000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1522000
Size:	40960

Details

Name:	00000004.00000003.345505436.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	0000001B.00000003.410201650.0000000000597000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	597000
Size:	49152

Details

Name:	0000001F.00000003.415420854.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	8192

Details

Name:	0000001B.00000000.396506681.00000000003F1000.00000020.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000022.00000003.441822628.0000017AD1E53000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E53000
Size:	114688

Details

Name:	00000006.00000003.365033074.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	16384

Details

Name:	00000004.00000003.358369901.000000000369E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	369E000
Size:	8192

Details

Name:	00000006.00000003.357796105.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	8192

Details

Name:	00000006.00000003.354935698.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000022.00000002.443426603.00007FF54DC94000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DC94000
Size:	20480

Details

Name:	00000006.00000003.355993730.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	24576

Details

Name:	00000004.00000003.349705769.0000000004431000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4431000
Size:	430080

Details

Name:	00000022.00000000.421447535.00007FF54DCB1000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DCB1000
Size:	16384

Details

Name:	00000005.00000002.362599138.00000202D2340000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2340000
Size:	4096

Details

Name:	00000019.00000003.401618436.0000000005C00000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C00000
Size:	49152

Details

Name:	00000028.00000003.482242729.000002AC2E003000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E003000
Size:	241664

Details

Name:	00000005.00000000.350771066.00007DF5D0EB2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EB2000
Size:	4096

Details

Name:	00000015.00000003.397033969.0000013E70C53000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70C53000
Size:	16384

Details

Name:	00000019.00000003.395660047.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	0000001F.00000003.414479508.0000000001171000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1171000
Size:	131072

Details

Name:	00000006.00000003.365386288.0000000006820000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6820000
Size:	57344

Details

Name:	00000000.00000003.330425178.0000000000F6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6D000
Size:	8192

Details

Name:	00000019.00000003.401023959.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000028.00000003.492945471.000002AC2DB8C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8C000
Size:	24576

Details

Name:	00000015.00000002.398335625.0000013E711C0000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E711C0000
Size:	4096

Details

Name:	00000006.00000003.352961188.000000000136C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	136C000
Size:	4096

Details

Name:	0000001B.00000003.411276644.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000006.00000003.386549860.00000000071B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B0000
Size:	32768

Details

Name:	00000006.00000002.582015718.000000007FFA2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA2000
Size:	4096

Details

Name:	0000002D.00000002.574713528.0000028B310B0000.00000004.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	28B310B0000
Size:	4096

Details

Name:	0000000A.00000003.365356296.0000000004EC0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EC0000
Size:	16384

Details

Name:	0000001B.00000003.410414460.0000000003D63000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D63000
Size:	499712

Details

Name:	00000019.00000003.395276272.0000000001581000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1581000
Size:	12288

Details

Name:	0000000A.00000000.363554127.000000000069A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	69A000
Size:	4096

Details

Name:	00000015.00000002.398588115.0000013E72A7A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A7A000
Size:	16384

Details

Name:	00000006.00000003.518354930.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000012.00000002.574145317.00007DF4BD5B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BD5B0000
Size:	20480

Details

Name:	00000016.00000002.391086212.0000000000ED0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	ED0000
Size:	16384

Details

Name:	00000028.00000000.475206672.00007DF571B10000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571B10000
Size:	12288

Details

Name:	0000001F.00000003.417743500.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000028.00000003.491906326.000002AC2DB90000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB90000
Size:	53248

Details

Name:	00000000.00000002.333912481.0000000002CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD0000
Size:	4096

Details

Name:	00000019.00000003.414221157.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	0000001F.00000003.414277537.0000000004FAE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAE000
Size:	8192

Details

Name:	00000028.00000003.480669001.000002AC2DB8F000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8F000
Size:	4096

Details

Name:	00000004.00000003.358595247.00000000036AA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36AA000
Size:	4096

Details

Name:	00000022.00000000.421255768.0000017AD1D30000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD1D30000
Size:	102400

Details

Name:	0000002A.00000002.577818321.00007FF5ED774000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED774000
Size:	20480

Details

Name:	00000006.00000003.512347498.00000000013EC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13EC000
Size:	12288

Details

Name:	0000001B.00000003.425691810.000000000055E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55E000
Size:	8192

Details

Name:	00000006.00000003.488473717.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001F.00000003.425506905.00000000057A0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	36864

Details

Name:	00000019.00000003.399233459.0000000005B90000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B90000
Size:	16384

Details

Name:	0000002D.00000002.575783376.00007FF5ED491000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED491000
Size:	12288

Details

Name:	00000028.00000002.508220987.00007FF5639F7000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5639F7000
Size:	4096

Details

Name:	00000015.00000003.397346471.0000013E70BB9000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BB9000
Size:	36864

Details

Name:	00000014.00000002.403695449.0000000000FB7000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB7000
Size:	8192

Details

Name:	00000004.00000003.358524475.00000000036AA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36AA000
Size:	4096

Details

Name:	0000001F.00000003.417304533.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000029.00000003.488221987.00000199BA13E000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA13E000
Size:	57344

Details

Name:	0000002A.00000002.574950939.00000267C6696000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6696000
Size:	36864

Details

Name:	0000002A.00000002.578475396.00007FF5ED9B7000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED9B7000
Size:	16384

Details

Name:	0000002A.00000002.573383464.000000A9452FE000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9452FE000
Size:	8192

Details

Name:	0000002A.00000002.575029183.00000267C66A2000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C66A2000
Size:	106496

Details

Name:	00000006.00000002.573424877.00000000007BA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7BA000
Size:	24576

Details

Name:	0000002A.00000002.577341842.00007DF5FB710000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB710000
Size:	12288

Details

Name:	00000006.00000003.356173003.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	12288

Details

Name:	0000002A.00000002.577213146.00007DF5FB702000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB702000
Size:	4096

Details

Name:	0000002A.00000002.577064882.00007DF5FB6F0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB6F0000
Size:	4096

Details

Name:	00000004.00000003.358133622.00000000036D8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36D8000
Size:	8192

Details

Name:	00000028.00000003.483693467.000002AC2E019000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E019000
Size:	90112

Details

Name:	00000015.00000002.398478785.0000013E72710000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13E72710000
Size:	4096

Details

Name:	00000006.00000003.365919239.0000000006981000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6981000
Size:	135168

Details

Name:	00000015.00000003.388004336.0000013E72A6E000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A6E000
Size:	16384

Details

Name:	0000001F.00000002.439372182.0000000001096000.00000040.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1096000
Size:	8192

Details

Name:	0000001F.00000003.416532753.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	20480

Details

Name:	0000000A.00000002.366041017.0000000000E0F000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E0F000
Size:	4096

Details

Name:	00000006.00000002.573637735.0000000000B00000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	B00000
Size:	4096

Details

Name:	00000006.00000003.386480125.00000000071B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B0000
Size:	12288

Details

Name:	00000004.00000003.342663375.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000019.00000002.415969258.00000000014A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14A0000
Size:	40960

Details

Name:	00000026.00000002.465622723.000000F4517FB000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F4517FB000
Size:	20480

Details

Name:	00000019.00000003.398905761.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000019.00000003.400577302.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	16384

Details

Name:	00000000.00000002.333616789.00000000008D6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8D6000
Size:	24576

Details

Name:	0000002A.00000002.578322736.00007FF5ED97E000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED97E000
Size:	8192

Details

Name:	00000015.00000002.398839769.00007FF57CC2C000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CC2C000
Size:	4096

Details

Name:	00000006.00000003.495619576.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001B.00000003.425791770.000000000056D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D000
Size:	24576

Details

Name:	00000006.00000003.486835035.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000001F.00000003.418968719.0000000005770000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5770000
Size:	61440

Details

Name:	00000004.00000002.361386190.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	4096

Details

Name:	00000006.00000002.576321545.0000000002E3F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E3F000
Size:	4096

Details

Name:	00000004.00000003.342061391.0000000003691000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3691000
Size:	204800

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000014.00000002.404983337.0000000003E6F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E6F000
Size:	8192

Details

Name:	00000006.00000003.358111173.000000000579A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	579A000
Size:	24576

Details

Name:	0000001B.00000003.407391226.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	0000001F.00000003.415951426.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	0000002D.00000002.573352944.000000FFB727E000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB727E000
Size:	8192

Details

Name:	0000000A.00000002.366173865.000000000270D000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	270D000
Size:	4096

Details

Name:	00000029.00000002.488869684.00000199BA14D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14D000
Size:	12288

Details

Name:	0000002A.00000002.576601255.00000267CBC9B000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBC9B000
Size:	81920

Details

Name:	00000006.00000003.541252209.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	0000002A.00000002.573893184.00000267C6530000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C6530000
Size:	102400

Details

Name:	0000002D.00000002.575637732.00007FF5ED479000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED479000
Size:	12288

Details

Name:	0000001F.00000002.439202818.0000000000FCE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FCE000
Size:	8192

Details

Name:	0000002A.00000002.577881971.00007FF5ED7A4000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7A4000
Size:	12288

Details

Name:	00000004.00000002.360595294.00000000012F0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	12F0000
Size:	32768

Details

Name:	0000002D.00000002.575532486.00007FF5ED3FE000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3FE000
Size:	4096

Details

Name:	00000019.00000000.393929654.000000007F080000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F080000
Size:	4096

Details

Name:	00000028.00000002.508981654.00007FF563E0A000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E0A000
Size:	8192

Details

Name:	00000004.00000003.358790743.00000000036B3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36B3000
Size:	4096

Details

Name:	00000028.00000003.489236265.000002AC2DB77000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB77000
Size:	57344

Details

Name:	0000000D.00000000.366559599.00000000FF9D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF9D0000
Size:	4096

Details

Name:	00000028.00000002.508463253.00007FF563C7B000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563C7B000
Size:	8192

Details

Name:	00000000.00000003.329037353.0000000000F72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F72000
Size:	139264

Details

Name:	00000000.00000002.333865021.00000000011F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11F8000
Size:	8192

Details

Name:	00000004.00000002.361405568.0000000004502000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4502000
Size:	4096

Details

Name:	00000006.00000003.540943115.0000000006997000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6997000
Size:	16384

Details

Name:	00000006.00000003.359522191.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000003.356734262.000000000137A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	137A000
Size:	4096

Details

Name:	0000002A.00000002.578757636.00007FF5EDA7A000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5EDA7A000
Size:	12288

Details

Name:	00000019.00000003.400407110.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000004.00000003.350297733.000000000377C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	377C000
Size:	8192

Details

Name:	00000006.00000003.538507400.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	00000006.00000002.581960648.000000007FF92000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF92000
Size:	4096

Details

Name:	00000016.00000000.390611908.0000000000480000.00000008.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	0000001F.00000002.439569543.0000000001130000.00000004.00000020.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1130000
Size:	36864

Details

Name:	00000028.00000002.507143693.000000FA9387C000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9387C000
Size:	16384

Details

Name:	00000000.00000003.330520213.0000000000F6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6D000
Size:	8192

Details

Name:	00000028.00000003.492272940.000002AC2DB8E000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8E000
Size:	397312

Details

Name:	00000014.00000003.402425432.0000000003E06000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E06000
Size:	4096

Details

Name:	00000012.00000000.370192381.000000784EA7F000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784EA7F000
Size:	4096

Details

Name:	00000015.00000002.399015780.00007FF57CF48000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CF48000
Size:	8192

Details

Name:	0000002A.00000002.574861153.00000267C668C000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C668C000
Size:	4096

Details

Name:	0000002D.00000002.575837352.00007FF5ED49A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED49A000
Size:	4096

Details

Name:	00000006.00000003.357593483.00000000057B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	12288

Details

Name:	00000000.00000003.307814177.0000000000F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F9D000
Size:	12288

Details

Name:	00000000.00000003.330541298.0000000000F4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F4D000
Size:	8192

Details

Name:	0000001F.00000003.417143532.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000014.00000002.405373164.0000000004AC0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4AC0000
Size:	733184

Details

Name:	00000019.00000002.417223775.000000000188E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	188E000
Size:	8192

Details

Name:	0000001B.00000003.426285086.00000000004E7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E7000
Size:	8192

Details

Name:	0000001B.00000003.425490231.0000000000573000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	573000
Size:	49152

Details

Name:	00000014.00000002.403915066.00000000014B0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14B0000
Size:	4096

Details

Name:	00000028.00000002.507709062.000002AC2D316000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D316000
Size:	8192

Details

Name:	00000015.00000002.399559659.00007FF57D292000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D292000
Size:	4096

Details

Name:	00000019.00000002.415225738.0000000000A20000.00000004.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	A20000
Size:	4096

Details

Name:	0000001F.00000003.414850302.00000000011D4000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D4000
Size:	36864

Details

Name:	00000014.00000003.401298279.0000000003E44000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E44000
Size:	12288

Details

Name:	0000002D.00000002.574524330.0000028B30960000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B30960000
Size:	12288

Details

Name:	00000006.00000003.357882744.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	4096

Details

Name:	0000001C.00000002.407785261.0000000001580000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1580000
Size:	4096

Details

Name:	0000001F.00000003.416416356.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	65536

Details

Name:	00000006.00000002.579708425.0000000005540000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5540000
Size:	4096

Details

Name:	00000005.00000002.362973681.00000202D2C02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2C02000
Size:	4096

Details

Name:	00000022.00000002.442891671.00007FF54DA36000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA36000
Size:	16384

Details

Name:	00000006.00000003.355745711.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	65536

Details

Name:	00000022.00000002.443112342.00007FF54DBBD000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DBBD000
Size:	4096

Details

Name:	00000006.00000003.358544725.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	00000028.00000003.490211101.000002AC2DB9D000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB9D000
Size:	32768

Details

Name:	00000022.00000002.442818724.00007FF54D441000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54D441000
Size:	20480

Details

Name:	00000014.00000003.402616193.0000000003DF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF0000
Size:	24576

Details

Name:	00000014.00000002.403625502.0000000000D20000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D20000
Size:	4096

Details

Name:	00000006.00000002.576575049.0000000002EAC000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EAC000
Size:	16384

Details

Name:	0000001B.00000003.407355959.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000015.00000002.397639509.0000001DB86FE000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB86FE000
Size:	8192

Details

Name:	0000002D.00000000.549147152.00007FF5D93B1000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D93B1000
Size:	8192

Details

Name:	0000000A.00000000.363532859.0000000000690000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	690000
Size:	4096

Details

Name:	00000015.00000002.398711459.00007DF58B032000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B032000
Size:	4096

Details

Name:	00000006.00000003.485253306.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000002A.00000002.575977457.00000267C7700000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267C7700000
Size:	65536

Details

Name:	0000001F.00000003.426091540.00000000057D5000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D5000
Size:	12288

Details

Name:	00000006.00000003.488113559.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000015.00000002.399333702.00007FF57D1E2000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D1E2000
Size:	8192

Details

Name:	0000001B.00000002.427680411.0000000000390000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	390000
Size:	12288

Details

Name:	0000000F.00000002.371051719.0000000002C11000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C11000
Size:	40960

Details

Name:	0000001B.00000003.414761061.00000000005C6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	8192

Details

Name:	00000014.00000000.372379400.00000000003F1000.00000020.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	3F1000
Size:	528384

Details

Name:	00000012.00000002.574248413.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	00000000.00000003.329302131.0000000007213000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7213000
Size:	192512

Details

Name:	00000019.00000002.420774117.0000000005BF0000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5BF0000
Size:	28672

Details

Name:	0000001F.00000003.415822502.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	0000001F.00000003.416100718.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	00000006.00000003.459998930.00000000013DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13DE000
Size:	4096

Details

Name:	00000019.00000003.401495890.0000000005C05000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C05000
Size:	12288

Details

Name:	00000004.00000000.332953791.00000000FF210000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF210000
Size:	4096

Details

Name:	0000001F.00000000.412643316.0000000000380000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	380000
Size:	4096

Details

Name:	00000014.00000003.399976246.0000000003DE9000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE9000
Size:	8192

Details

Name:	00000019.00000003.399703573.0000000005BC0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC0000
Size:	65536

Details

Name:	0000002A.00000002.573336611.000000A94527E000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A94527E000
Size:	8192

Details

Name:	00000026.00000002.465806168.0000024187CF0000.00000004.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24187CF0000
Size:	4096

Details

Name:	00000026.00000002.467037218.00007FF55A120000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A120000
Size:	4096

Details

Name:	00000004.00000003.356853891.00000000036A1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A1000
Size:	569344

Details

Name:	00000006.00000003.353443573.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000004.00000002.360286681.00000000010D0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10D0000
Size:	4096

Details

Name:	00000006.00000003.353524607.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	155648

Details

Name:	00000015.00000003.397163919.0000013E70C3A000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70C3A000
Size:	94208

Details

Name:	0000002A.00000002.576751307.00000267CBCD9000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBCD9000
Size:	4096

Details

Name:	00000004.00000003.357223615.000000000127A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127A000
Size:	20480

Details

Name:	00000012.00000000.394074347.0000024B7CA13000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA13000
Size:	86016

Details

Name:	0000002D.00000002.575210328.00007FF5ED23A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED23A000
Size:	12288

Details

Name:	00000006.00000002.574868072.0000000001336000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1336000
Size:	57344

Details

Name:	00000012.00000002.574183826.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000006.00000003.364356848.00000000060B6000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60B6000
Size:	12288

Details

Name:	00000012.00000000.393903133.000000784E54B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	784E54B000
Size:	20480

Details

Name:	00000015.00000002.399494910.00007FF57D26B000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D26B000
Size:	8192

Details

Name:	00000019.00000003.396918019.0000000003450000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3450000
Size:	49152

Details

Name:	00000022.00000002.443020795.00007FF54DB2B000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB2B000
Size:	8192

Details

Name:	0000002A.00000002.573791389.000000A945E7C000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A945E7C000
Size:	16384

Details

Name:	00000004.00000002.360043226.00000000008E0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8E0000
Size:	16384

Details

Name:	00000006.00000003.354484538.0000000005620000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5620000
Size:	32768

Details

Name:	00000006.00000003.358424674.00000000057CD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57CD000
Size:	12288

Details

Name:	0000001F.00000003.418570537.0000000005530000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5530000
Size:	32768

Details

Name:	00000015.00000002.398913307.00007FF57CE23000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CE23000
Size:	8192

Details

Name:	00000029.00000003.488370789.00000199BA14D000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA14D000
Size:	12288

Details

Name:	00000004.00000003.349359636.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000004.00000003.359093526.0000000003730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3730000
Size:	12288

Details

Name:	0000001B.00000002.428889055.000000000391F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	391F000
Size:	4096

Details

Name:	0000001B.00000003.415057625.000000000058A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58A000
Size:	4096

Details

Name:	00000012.00000000.394419298.00007FF5B198D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B198D000
Size:	4096

Details

Name:	0000002D.00000002.575191644.00007FF5ED03A000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED03A000
Size:	4096

Details

Name:	00000012.00000000.370481328.00007DF5BF6E2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E2000
Size:	4096

Details

Name:	00000029.00000003.488317324.00000199BA12F000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA12F000
Size:	24576

Details

Name:	00000028.00000003.484696580.000002AC2DB61000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB61000
Size:	61440

Details

Name:	0000001F.00000002.440513031.00000000057B0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57B0000
Size:	12288

Details

Name:	00000004.00000003.358035678.00000000036D5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36D5000
Size:	57344

Details

Name:	00000014.00000002.403825757.000000000147E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	147E000
Size:	8192

Details

Name:	00000004.00000000.332794709.0000000000472000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Details

Name:	00000012.00000000.370221922.0000024B7C840000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	0000001B.00000002.428676459.00000000018BE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BE000
Size:	8192

Details

Name:	00000015.00000002.398526532.0000013E72A69000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A69000
Size:	20480

Details

Name:	00000015.00000002.397860717.0000013E70B10000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70B10000
Size:	4096

Details

Name:	0000001F.00000003.414142961.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	172032

Details

Name:	00000006.00000003.358602759.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	36864

Details

Name:	00000004.00000002.359423855.00000000003F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000006.00000003.364008237.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	28672

Details

Name:	00000019.00000003.400047202.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	28672

Details

Name:	00000005.00000002.363005354.00007DF5D0EB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D0EB0000
Size:	4096

Details

Name:	00000014.00000003.399551855.0000000003DE1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DE1000
Size:	671744

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000026.00000002.466875888.00007FF55A05B000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A05B000
Size:	24576

Details

Name:	00000028.00000002.507276436.000002AC2D0C0000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC2D0C0000
Size:	4096

Details

Name:	00000006.00000002.576194683.0000000002CBB000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2CBB000
Size:	4096

Details

Name:	00000026.00000002.466406153.0000024188602000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24188602000
Size:	4096

Details

Name:	0000001B.00000003.427001056.00000000004F4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F4000
Size:	4096

Details

Name:	0000001B.00000003.427099064.0000000000580000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	580000
Size:	20480

Details

Name:	0000000F.00000002.370974529.00000000011D0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	11D0000
Size:	8192

Details

Name:	00000006.00000003.356880687.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000029.00000002.489225358.00007FF55315C000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55315C000
Size:	4096

Details

Name:	00000012.00000000.394169676.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	00000029.00000002.489110758.00007DF5611D0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5611D0000
Size:	4096

Details

Name:	00000015.00000003.396802216.0000013E72A83000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A83000
Size:	57344

Details

Name:	00000028.00000003.484219467.000002AC2DB80000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB80000
Size:	4096

Details

Name:	00000012.00000000.370475684.00007DF5BF6E0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF6E0000
Size:	4096

Details

Name:	00000006.00000002.576654708.0000000002ED0000.00000040.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2ED0000
Size:	4096

Details

Name:	0000001B.00000003.425875477.0000000000552000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	552000
Size:	4096

Details

Name:	0000001B.00000003.426783992.0000000000501000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	501000
Size:	4096

Details

Name:	00000028.00000003.480583826.000002AC2E003000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E003000
Size:	225280

Details

Name:	00000012.00000000.370396461.0000024B7CA41000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	24B7CA41000
Size:	12288

Details

Name:	00000006.00000003.476156290.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000004.00000002.360954337.0000000003705000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3705000
Size:	8192

Details

Name:	0000001C.00000003.406795983.0000000003330000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3330000
Size:	45056

Details

Name:	00000028.00000003.482486589.000002AC2DB7A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB7A000
Size:	24576

Details

Name:	00000006.00000003.365156032.0000000005917000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5917000
Size:	12288

Details

Name:	0000000A.00000002.366339064.0000000004DE0000.00000040.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4DE0000
Size:	8192

Details

Name:	00000006.00000002.573586061.0000000000AF5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AF5000
Size:	45056

Details

Name:	00000006.00000003.352749704.00000000011F4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11F4000
Size:	4096

Details

Name:	0000001B.00000003.426818112.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	0000001F.00000003.425813036.00000000011DB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DB000
Size:	12288

Details

Name:	0000001B.00000003.422909506.00000000004FB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FB000
Size:	462848

Details

Name:	00000012.00000000.394215846.0000024B7CF80000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CF80000
Size:	4096

Details

Name:	0000001B.00000003.426829037.00000000004EA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EA000
Size:	4096

Details

Name:	0000001B.00000003.414980529.0000000003DBE000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DBE000
Size:	4096

Details

Name:	0000001B.00000002.428013740.00000000004E8000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E8000
Size:	4096

Details

Name:	0000001F.00000003.420682971.0000000005780000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5780000
Size:	8192

Details

Name:	00000006.00000003.354236145.0000000005630000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5630000
Size:	28672

Details

Name:	0000002A.00000000.515701544.00007DF5FB6F0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB6F0000
Size:	4096

Details

Name:	00000028.00000003.477817772.000002AC2D900000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D900000
Size:	4096

Details

Name:	00000005.00000002.363332013.00007FF5C3147000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3147000
Size:	4096

Details

Name:	0000001F.00000003.425222902.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000006.00000003.470718569.0000000006995000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6995000
Size:	110592

Details

Name:	00000006.00000003.355875821.0000000005730000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5730000
Size:	16384

Details

Name:	00000006.00000003.357087568.0000000005750000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	65536

Details

Name:	00000029.00000002.488988331.00000199BA350000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199BA350000
Size:	36864

Details

Name:	00000006.00000003.364244713.00000000057C8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C8000
Size:	32768

Details

Name:	00000006.00000003.459939387.00000000013BA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13BA000
Size:	143360

Details

Name:	00000000.00000002.333684301.0000000000C7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7E000
Size:	8192

Details

Name:	00000000.00000002.333597498.00000000008B8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8B8000
Size:	4096

Details

Name:	0000002A.00000002.574798949.00000267C6677000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6677000
Size:	8192

Details

Name:	00000019.00000003.414659880.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000028.00000003.478891321.000002AC2DB72000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB72000
Size:	24576

Details

Name:	0000001C.00000002.407770862.000000000156D000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	156D000
Size:	8192

Details

Name:	00000028.00000002.508347480.00007FF563BD6000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563BD6000
Size:	4096

Details

Name:	00000015.00000002.399069943.00007FF57CF7F000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CF7F000
Size:	4096

Details

Name:	00000029.00000002.488585891.0000000257F79000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	257F79000
Size:	28672

Details

Name:	00000019.00000002.415874249.0000000001480000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1480000
Size:	8192

Details

Name:	00000004.00000003.351624501.0000000004503000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4503000
Size:	192512

Details

Name:	00000006.00000000.351294168.0000000000760000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	760000
Size:	102400

Details

Name:	00000014.00000000.372585311.00000000FF650000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF650000
Size:	12288

Details

Name:	00000006.00000003.477961337.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	131072

Details

Name:	00000019.00000003.399565899.000000000154E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E000
Size:	258048

Details

Name:	00000004.00000003.357592213.0000000003704000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3704000
Size:	12288

Details

Name:	00000006.00000002.579309378.0000000003EE9000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EE9000
Size:	4096

Details

Name:	00000028.00000002.508546010.00007FF563D0B000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D0B000
Size:	8192

Details

Name:	00000028.00000002.508801973.00007FF563DB3000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DB3000
Size:	12288

Details

Name:	00000015.00000002.398666728.0000013E72C30000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E72C30000
Size:	8192

Details

Name:	0000001F.00000003.417117138.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	0000002D.00000002.574364514.0000028B30540000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28B30540000
Size:	12288

Details

Name:	0000001C.00000002.408073343.00000000017FF000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FF000
Size:	4096

Details

Name:	00000015.00000002.399743156.00007FF57D2F3000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D2F3000
Size:	12288

Details

Name:	0000001B.00000003.426124872.000000000052D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52D000
Size:	32768

Details

Name:	00000000.00000002.333633969.00000000008EA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8EA000
Size:	16384

Details

Name:	00000015.00000002.398745366.00007DF58B050000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF58B050000
Size:	12288

Details

Name:	00000004.00000003.358828497.0000000003696000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3696000
Size:	8192

Details

Name:	00000000.00000002.334016840.00000000031BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31BE000
Size:	8192

Details

Name:	00000015.00000003.396916776.0000013E72A66000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A66000
Size:	36864

Details

Name:	00000006.00000003.462580254.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000028.00000003.484042740.000002AC2DB8B000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8B000
Size:	16384

Details

Name:	0000002A.00000003.516878984.00000267CBF40000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBF40000
Size:	4096

Details

Name:	00000028.00000002.508534157.00007FF563CFC000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563CFC000
Size:	4096

Details

Name:	0000001F.00000003.423386167.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	4096

Details

Name:	00000019.00000003.396409596.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000006.00000002.576562665.0000000002EA5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EA5000
Size:	16384

Details

Name:	00000000.00000000.306960139.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	00000014.00000003.402639391.0000000003DF9000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF9000
Size:	8192

Details

Name:	00000019.00000002.418176629.0000000003250000.00000004.00000040.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3250000
Size:	4096

Details

Name:	0000001F.00000000.412676617.000000000038A000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	38A000
Size:	4096

Details

Name:	00000019.00000002.415094359.000000000089D000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	89D000
Size:	8192

Details

Name:	00000006.00000003.365276925.0000000006981000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6981000
Size:	135168

Details

Name:	00000014.00000003.387644742.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	0000002A.00000002.578097241.00007FF5ED849000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED849000
Size:	4096

Details

Name:	00000026.00000002.466616910.00007DF567E80000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E80000
Size:	12288

Details

Name:	0000001B.00000002.428146491.000000000055E000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55E000
Size:	8192

Details

Name:	00000006.00000002.575328010.00000000013BA000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13BA000
Size:	151552

Details

Name:	0000001F.00000003.425462239.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	65536

Details

Name:	00000014.00000003.394107912.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000000.00000002.333650240.0000000000ACE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ACE000
Size:	8192

Details

Name:	00000028.00000002.509115372.00007FF563E81000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563E81000
Size:	32768

Details

Name:	00000006.00000002.579911097.000000000562F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	562F000
Size:	4096

Details

Name:	0000000D.00000000.366468218.0000000000472000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Details

Name:	00000006.00000003.358569432.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	49152

Details

Name:	0000001F.00000003.422965855.00000000057C0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	12288

Details

Name:	00000014.00000003.402365841.0000000003E07000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E07000
Size:	4096

Details

Name:	00000006.00000003.474212066.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	0000000F.00000000.368704644.00000000007FA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA000
Size:	4096

Details

Name:	00000000.00000002.334027368.00000000032FE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32FE000
Size:	8192

Details

Name:	0000002D.00000002.575854198.00007FF5ED4A1000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4A1000
Size:	16384

Details

Name:	00000028.00000002.508602511.00007FF563D41000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563D41000
Size:	24576

Details

Name:	00000006.00000003.365442227.0000000006BD0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6BD0000
Size:	65536

Details

Name:	0000001B.00000003.425921366.0000000000536000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	69632

Details

Name:	00000006.00000002.574504267.000000000123E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	123E000
Size:	8192

Details

Name:	0000001F.00000003.416165434.0000000001054000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1054000
Size:	4096

Details

Name:	0000001F.00000003.438233925.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000000.00000002.334031812.0000000004550000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000005.00000002.363543986.00007FF5C3222000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3222000
Size:	12288

Details

Name:	00000006.00000003.361142971.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000022.00000002.442170801.0000004E0257B000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E0257B000
Size:	20480

Details

Name:	0000001F.00000002.440543658.000000000580E000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	580E000
Size:	8192

Details

Name:	00000014.00000003.401031946.0000000003E55000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E55000
Size:	16384

Details

Name:	0000001B.00000003.409965951.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	0000002D.00000002.574915406.0000028B31150000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B31150000
Size:	20480

Details

Name:	0000000D.00000000.366485487.0000000000480000.00000008.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page write copy
Base address:	480000
Size:	12288

Details

Name:	00000019.00000003.396229059.0000000001344000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1344000
Size:	4096

Details

Name:	0000001C.00000002.407833246.00000000015A0000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A0000
Size:	4096

Details

Name:	0000001C.00000002.407797667.0000000001587000.00000040.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1587000
Size:	4096

Details

Name:	0000002A.00000002.575144641.00000267C6702000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6702000
Size:	45056

Details

Name:	00000026.00000002.466013155.0000024187E13000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E13000
Size:	86016

Details

Name:	0000001F.00000003.420554581.0000000005551000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5551000
Size:	57344

Details

Name:	00000014.00000003.399996088.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	0000001F.00000002.440359949.0000000005563000.00000004.00000040.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5563000
Size:	12288

Details

Name:	0000002A.00000002.578118033.00007FF5ED85D000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED85D000
Size:	4096

Details

Name:	00000000.00000002.333717935.0000000000CD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CD2000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000001C.00000002.408251478.0000000003320000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3320000
Size:	4096

Details

Name:	00000019.00000002.417753764.00000000031FE000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31FE000
Size:	8192

Details

Name:	00000019.00000003.395509193.000000000157E000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	157E000
Size:	12288

Details

Name:	00000004.00000003.357513700.000000000370C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	370C000
Size:	53248

Details

Name:	0000001B.00000003.426879283.00000000004F0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F0000
Size:	24576

Details

Name:	00000012.00000000.394287003.00007DF5BF700000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BF700000
Size:	12288

Details

Name:	0000001B.00000003.410128871.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000019.00000003.395377240.0000000001576000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1576000
Size:	20480

Details

Name:	00000004.00000003.358987290.0000000003715000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3715000
Size:	8192

Details

Name:	00000004.00000002.361371315.00000000043B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43B0000
Size:	4096

Details

Name:	00000015.00000002.399982049.00007FF57D32E000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57D32E000
Size:	24576

Details

Name:	0000002A.00000002.577006241.00007DF4F95C0000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4F95C0000
Size:	20480

Details

Name:	00000022.00000002.443041483.00007FF54DB31000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DB31000
Size:	12288

Details

Name:	00000014.00000003.401423388.0000000003E35000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E35000
Size:	4096

Details

Name:	00000004.00000002.360509945.0000000001200000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1200000
Size:	8192

Details

Name:	00000026.00000002.466275827.0000024187F13000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187F13000
Size:	12288

Details

Name:	00000012.00000000.394609225.00007FF5B19FD000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19FD000
Size:	8192

Details

Name:	00000016.00000000.390500995.00000000003F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000006.00000003.357759774.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	8192

Details

Name:	00000016.00000002.390974442.0000000000472000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Details

Name:	00000015.00000002.397849694.0000013E70B00000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	13E70B00000
Size:	12288

Details

Name:	00000006.00000003.353617191.0000000001356000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1356000
Size:	36864

Details

Name:	00000026.00000002.467070096.00007FF55A127000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A127000
Size:	16384

Details

Name:	00000004.00000002.360723266.0000000001EF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EF0000
Size:	36864

Details

Name:	00000006.00000003.358691803.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000006.00000002.574468996.00000000011F0000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11F0000
Size:	16384

Details

Name:	0000001B.00000002.429021995.00000000FF290000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF290000
Size:	4096

Details

Name:	00000006.00000003.353807124.000000000139D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	139D000
Size:	53248

Details

Name:	00000028.00000002.508361540.00007FF563BE1000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563BE1000
Size:	4096

Details

Name:	00000006.00000003.352614400.0000000001384000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1384000
Size:	102400

Details

Name:	00000019.00000002.420562777.0000000005B70000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5B70000
Size:	65536

Details

Name:	00000014.00000003.391297931.0000000004C69000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4C69000
Size:	221184

Details

Name:	0000002D.00000002.575380364.00007FF5ED3B3000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED3B3000
Size:	8192

Details

Name:	0000001B.00000003.415023730.00000000005C6000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	8192

Details

Name:	0000001B.00000002.427836094.0000000000472000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	472000
Size:	57344

Details

Name:	00000028.00000002.507098556.000000FA9367F000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA9367F000
Size:	4096

Details

Name:	00000006.00000003.360203587.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	8192

Details

Name:	0000001F.00000003.415163125.00000000011C1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C1000
Size:	24576

Details

Name:	00000006.00000003.360163087.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000001.372638115.00000000003F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	4096

Details

Name:	00000019.00000002.417890124.000000000321A000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	321A000
Size:	4096

Details

Name:	00000014.00000003.394159438.0000000003E88000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E88000
Size:	94208

Details

Name:	0000001F.00000002.439359340.0000000001090000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1090000
Size:	4096

Details

Name:	0000000A.00000002.365938821.0000000000AF9000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AF9000
Size:	28672

Details

Name:	0000001C.00000002.407514179.00000000010BE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10BE000
Size:	4096

Details

Name:	00000006.00000002.581063395.00000000061DF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	61DF000
Size:	4096

Details

Name:	00000012.00000000.394007641.0000024B7C890000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	24B7C890000
Size:	4096

Details

Name:	0000001B.00000003.407321614.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000004.00000003.346383622.0000000004430000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4430000
Size:	53248

Details

Name:	00000019.00000003.400671339.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	12288

Details

Name:	0000001F.00000003.438381129.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000000.00000002.333829624.0000000001000000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1000000
Size:	69632

Details

Name:	0000001B.00000002.428236237.0000000000589000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	589000
Size:	4096

Details

Name:	0000001B.00000000.396701435.00000000FF2A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF2A0000
Size:	12288

Details

Name:	00000012.00000000.394670648.00007FF5B1A75000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A75000
Size:	16384

Details

Name:	00000019.00000003.413961467.0000000001529000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1529000
Size:	36864

Details

Name:	00000015.00000002.398203592.0000013E70E20000.00000004.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	13E70E20000
Size:	4096

Details

Name:	00000006.00000002.575306767.00000000013AE000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13AE000
Size:	4096

Details

Name:	00000014.00000003.402575502.0000000003DDB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDB000
Size:	8192

Details

Name:	0000002A.00000002.575182894.00000267C6713000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6713000
Size:	12288

Details

Name:	00000006.00000003.358738382.00000000057C1000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C1000
Size:	53248

Details

Name:	00000022.00000000.421391383.00007DF55B930000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55B930000
Size:	12288

Details

Name:	00000004.00000003.351696601.0000000004542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4542000
Size:	12288

Details

Name:	00000015.00000002.398546102.0000013E72A73000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A73000
Size:	8192

Details

Name:	00000016.00000002.391003175.000000000049B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49B000
Size:	159744

Details

Name:	00000015.00000002.398002091.0000013E70BC3000.00000004.00000020.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	13E70BC3000
Size:	102400

Details

Name:	0000001F.00000002.440606029.00000000059BE000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59BE000
Size:	8192

Details

Name:	0000001B.00000003.427064738.0000000000389000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	389000
Size:	4096

Details

Name:	00000028.00000003.489539267.000002AC2DB79000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB79000
Size:	36864

Details

Name:	00000004.00000003.357649703.00000000036F4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	8192

Details

Name:	0000001B.00000003.410497329.0000000003F20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F20000
Size:	860160

Details

Name:	00000005.00000003.362177086.00000202D2451000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	202D2451000
Size:	126976

Details

Name:	0000001C.00000002.408373739.000000007F820000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F820000
Size:	4096

Details

Name:	00000004.00000003.357199766.000000000371B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	371B000
Size:	69632

Details

Name:	00000006.00000003.364334075.0000000005910000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5910000
Size:	24576

Details

Name:	00000004.00000003.357545611.0000000003707000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3707000
Size:	20480

Details

Name:	00000015.00000002.398489155.0000013E72A60000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A60000
Size:	12288

Details

Name:	00000028.00000003.506556686.000002AC2D25A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D25A000
Size:	90112

Details

Name:	00000028.00000003.488970007.000002AC2DB8A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8A000
Size:	12288

Details

Name:	00000019.00000003.399978878.0000000005BE0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE0000
Size:	20480

Details

Name:	00000028.00000002.508865267.00007FF563DC7000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563DC7000
Size:	49152

Details

Name:	00000000.00000000.306985661.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	0000001F.00000003.426061512.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	16384

Details

Name:	00000004.00000002.361163366.0000000003EEE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EEE000
Size:	8192

Details

Name:	00000006.00000003.364364228.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	65536

Details

Name:	00000004.00000002.360552713.0000000001276000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1276000
Size:	4096

Details

Name:	00000006.00000002.581990198.000000007FFA0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA0000
Size:	4096

Details

Name:	0000001B.00000002.428224251.0000000000580000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	580000
Size:	20480

Details

Name:	00000016.00000002.391046769.0000000000E70000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E70000
Size:	102400

Details

Name:	00000014.00000003.402278148.0000000003DDD000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDD000
Size:	8192

Details

Name:	00000019.00000003.400253412.0000000005BD0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BD0000
Size:	4096

Details

Name:	00000005.00000002.363426824.00007FF5C3173000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3173000
Size:	12288

Details

Name:	00000006.00000002.581585985.0000000006ABD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6ABD000
Size:	12288

Details

Name:	00000014.00000003.402473060.0000000003DDA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDA000
Size:	12288

Details

Name:	00000005.00000002.363374340.00007FF5C315D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C315D000
Size:	4096

Details

Name:	00000006.00000003.503332275.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000015.00000003.387974586.0000013E72A85000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A85000
Size:	20480

Details

Name:	0000002A.00000002.576072497.00000267CBAC0000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267CBAC0000
Size:	4096

Details

Name:	00000006.00000003.359048179.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000001F.00000003.426005498.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	49152

Details

Name:	00000028.00000003.488538768.000002AC2DB8A000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB8A000
Size:	53248

Details

Name:	00000029.00000002.488702973.00000199B9FF0000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	199B9FF0000
Size:	12288

Details

Name:	00000019.00000003.400379211.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	00000006.00000002.581844097.000000007FE30000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FE30000
Size:	4096

Details

Name:	00000006.00000003.459870503.0000000001378000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1378000
Size:	208896

Details

Name:	00000014.00000002.406372082.0000000004B80000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B80000
Size:	4096

Details

Name:	0000002A.00000002.578292348.00007FF5ED96E000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED96E000
Size:	4096

Details

Name:	00000019.00000003.400546122.0000000005471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5471000
Size:	4096

Details

Name:	00000028.00000003.491815189.000002AC2DB82000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB82000
Size:	24576

Details

Name:	0000001B.00000003.426508802.0000000000505000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	505000
Size:	24576

Details

Name:	0000001C.00000002.408348545.000000007F810000.00000002.00020000.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F810000
Size:	4096

Details

Name:	00000014.00000002.405171414.0000000003F10000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3F10000
Size:	8192

Details

Name:	0000001F.00000000.412758833.000000007FDF2000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF2000
Size:	4096

Details

Name:	00000028.00000003.480681111.000002AC2DBA0000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA0000
Size:	114688

Details

Name:	00000004.00000003.357051448.00000000036A5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	24576

Details

Name:	0000001B.00000003.426317584.000000000038B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	38B000
Size:	16384

Details

Name:	0000001F.00000002.439818501.00000000013F1000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13F1000
Size:	49152

Details

Name:	0000002A.00000002.574265498.00000267C6613000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6613000
Size:	86016

Details

Name:	00000000.00000003.307793502.0000000000F3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F3E000
Size:	4096

Details

Name:	00000006.00000003.367609196.000000000698D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	698D000
Size:	12288

Details

Name:	00000004.00000002.360819145.00000000036CB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	36CB000
Size:	4096

Details

Name:	00000014.00000003.400360884.0000000003DF6000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DF6000
Size:	20480

Details

Name:	0000001B.00000003.426171344.0000000000545000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	8192

Details

Name:	0000001F.00000003.415059429.00000000011CB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CB000
Size:	36864

Details

Name:	0000000A.00000002.365783347.0000000000690000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	690000
Size:	4096

Details

Name:	00000006.00000003.364055086.0000000005900000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5900000
Size:	12288

Details

Name:	00000012.00000002.574714366.00007FF5B19DE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B19DE000
Size:	4096

Details

Name:	00000006.00000002.579806714.0000000005600000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5600000
Size:	65536

Details

Name:	00000019.00000003.396059063.0000000003280000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3280000
Size:	32768

Details

Name:	00000006.00000003.518149073.0000000001378000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1378000
Size:	208896

Details

Name:	0000001F.00000003.420019280.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000006.00000003.364345951.00000000060B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60B0000
Size:	20480

Details

Name:	0000001B.00000003.426902730.00000000004F5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F5000
Size:	4096

Details

Name:	00000026.00000002.466700982.00007FF559CE7000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF559CE7000
Size:	32768

Details

Name:	0000001B.00000002.428932074.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	4096

Details

Name:	00000000.00000003.333328813.0000000000FE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FE4000
Size:	61440

Details

Name:	00000006.00000003.365762697.00000000047BE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	47BE000
Size:	167936

Details

Name:	00000014.00000003.390156641.0000000003EA2000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA2000
Size:	8192

Details

Name:	00000006.00000002.580398134.00000000058EE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	58EE000
Size:	8192

Details

Name:	0000001F.00000003.425400559.0000000004FAF000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FAF000
Size:	4096

Details

Name:	00000006.00000003.359194337.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000015.00000003.397319840.0000013E70BDC000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E70BDC000
Size:	20480

Details

Name:	0000001B.00000003.427053181.0000000000589000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	589000
Size:	4096

Details

Name:	00000005.00000002.363141474.00007FF5C2D37000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2D37000
Size:	32768

Details

Name:	00000000.00000000.306974846.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	0000001C.00000002.408240493.00000000032FE000.00000004.00000001.sdmp
TargetID:	28
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32FE000
Size:	8192

Details

Name:	00000022.00000002.442922718.00007FF54DA7D000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54DA7D000
Size:	4096

Details

Name:	00000006.00000002.579732122.0000000005563000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5563000
Size:	12288

Details

Name:	00000004.00000003.357108294.00000000036BB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BB000
Size:	462848

Details

Name:	00000014.00000002.405053004.0000000003E7E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E7E000
Size:	20480

Details

Name:	0000000A.00000002.365882140.00000000007DE000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7DE000
Size:	8192

Details

Name:	00000000.00000002.333553670.0000000000500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	500000
Size:	102400

Details

Name:	00000015.00000002.399099912.00007FF57CF90000.00000002.00020000.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57CF90000
Size:	4096

Details

Name:	00000004.00000003.352355359.0000000004542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4542000
Size:	12288

Details

Name:	00000026.00000002.467300506.00007FF55A1FA000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A1FA000
Size:	4096

Details

Name:	00000029.00000002.489618409.00007FF55354A000.00000002.00020000.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55354A000
Size:	12288

Details

Name:	00000028.00000002.507378268.000002AC2D229000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2D229000
Size:	73728

Details

Name:	00000028.00000003.487129396.000002AC2E002000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2E002000
Size:	151552

Details

Name:	0000001F.00000000.412791401.000000007FE02000.00000002.00020000.sdmp
TargetID:	31
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE02000
Size:	4096

Details

Name:	00000006.00000003.512769461.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	122880

Details

Name:	00000019.00000002.416285226.00000000014C7000.00000040.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	14C7000
Size:	4096

Details

Name:	0000001F.00000003.420654896.0000000005550000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5550000
Size:	16384

Details

Name:	00000012.00000000.370409255.0000024B7CC00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7CC00000
Size:	4096

Details

Name:	00000006.00000002.581239547.00000000067DD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67DD000
Size:	12288

Details

Name:	00000006.00000003.354715493.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000005.00000002.362577597.00000202D2330000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D2330000
Size:	12288

Details

Name:	00000006.00000003.357815320.00000000057A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57A0000
Size:	12288

Details

Name:	00000022.00000002.442320085.0000017AD1D60000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17AD1D60000
Size:	4096

Details

Name:	00000015.00000002.397660805.0000001DB88FF000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DB88FF000
Size:	4096

Details

Name:	0000001F.00000002.440259413.00000000054E0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54E0000
Size:	65536

Details

Name:	00000005.00000002.363465192.00007FF5C3187000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C3187000
Size:	49152

Details

Name:	00000004.00000003.358503411.00000000036A8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A8000
Size:	4096

Details

Name:	0000001B.00000003.410071148.0000000003D20000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D20000
Size:	53248

Details

Name:	00000006.00000002.576257911.0000000002CF0000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2CF0000
Size:	20480

Details

Name:	00000006.00000003.356355640.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	65536

Details

Name:	00000006.00000003.361017690.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000026.00000002.465985744.0000024187E00000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E00000
Size:	4096

Details

Name:	0000002D.00000002.575112011.00007FF5ECC3C000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ECC3C000
Size:	16384

Details

Name:	0000000F.00000002.370794782.0000000000FA3000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FA3000
Size:	4096

Details

Name:	0000001B.00000003.413269839.00000000005A4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000006.00000003.364387368.00000000057C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57C0000
Size:	16384

Details

Name:	0000000F.00000000.368798855.000000007F1F0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1F0000
Size:	4096

Details

Name:	00000004.00000003.357682364.0000000003705000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3705000
Size:	8192

Details

Name:	0000000F.00000002.370506281.00000000008E8000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8E8000
Size:	4096

Details

Name:	00000028.00000003.485822871.000002AC2DBA4000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBA4000
Size:	147456

Details

Name:	00000006.00000003.553571850.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	126976

Details

Name:	00000019.00000003.395715435.00000000054A0000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54A0000
Size:	4096

Details

Name:	0000002D.00000000.549168258.00007FF5ED4A1000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4A1000
Size:	16384

Details

Name:	0000001F.00000002.439778375.00000000013DD000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13DD000
Size:	4096

Details

Name:	0000001B.00000003.426193803.000000000052F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	24576

Details

Name:	00000006.00000003.360991955.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	0000000F.00000002.370850697.0000000000FDB000.00000040.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FDB000
Size:	4096

Details

Name:	0000001F.00000003.416285890.0000000002E60000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E60000
Size:	16384

Details

Name:	0000001F.00000003.415144060.00000000011BB000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11BB000
Size:	12288

Details

Name:	00000006.00000003.539393944.000000000699E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699E000
Size:	122880

Details

Name:	0000002A.00000002.574679826.00000267C6658000.00000004.00000001.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	267C6658000
Size:	69632

Details

Name:	00000015.00000003.396985930.0000013E72A63000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A63000
Size:	8192

Details

Name:	0000002D.00000002.573734232.0000028B301F0000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B301F0000
Size:	8192

Details

Name:	00000004.00000003.359156674.0000000001329000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1329000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000002.363114740.00007FF5C2955000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2955000
Size:	16384

Details

Name:	0000001F.00000003.426031015.00000000057DD000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57DD000
Size:	12288

Details

Name:	00000026.00000002.466098577.0000024187E3C000.00000004.00000001.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24187E3C000
Size:	61440

Details

Name:	00000012.00000000.370676395.00007FF5B1A52000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B1A52000
Size:	12288

Details

Name:	0000002A.00000002.577967041.00007FF5ED7EF000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7EF000
Size:	4096

Details

Name:	00000019.00000002.415742236.0000000001320000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1320000
Size:	8192

Details

Name:	00000014.00000002.405238147.0000000003F45000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3F45000
Size:	12288

Details

Name:	00000028.00000002.508148608.00007FF563689000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563689000
Size:	8192

Details

Name:	00000015.00000003.387994610.0000013E72A72000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A72000
Size:	24576

Details

Name:	00000026.00000000.451815219.00007DF567E60000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF567E60000
Size:	4096

Details

Name:	0000002D.00000002.573327948.000000FFB6FCD000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFB6FCD000
Size:	12288

Details

Name:	00000019.00000002.418746012.0000000004471000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4471000
Size:	28672

Details

Name:	0000001F.00000003.426111012.00000000057D0000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	49152

Details

Name:	0000002D.00000002.574460918.0000028B30549000.00000004.00000040.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28B30549000
Size:	4096

Details

Name:	0000001F.00000003.415044717.00000000011D4000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D4000
Size:	12288

Details

Name:	00000028.00000002.508258979.00007FF563A8C000.00000002.00020000.sdmp
TargetID:	40
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF563A8C000
Size:	4096

Details

Name:	0000000F.00000002.370537250.0000000000A20000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	A20000
Size:	4096

Details

Name:	0000002D.00000002.574280598.0000028B30450000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B30450000
Size:	12288

Details

Name:	0000002D.00000002.573600914.0000028B301A0000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B301A0000
Size:	102400

Details

Name:	00000012.00000000.393961946.0000024B7C840000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B7C840000
Size:	102400

Details

Name:	0000001F.00000003.420403035.0000000004F81000.00000004.00000001.sdmp
TargetID:	31
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F81000
Size:	4096

Details

Name:	00000029.00000002.488803088.00000199BA136000.00000004.00000001.sdmp
TargetID:	41
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	199BA136000
Size:	28672

Details

Name:	0000001B.00000003.425936273.00000000004EF000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EF000
Size:	28672

Details

Name:	00000014.00000003.400812592.0000000003E61000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E61000
Size:	65536

Details

Name:	00000019.00000003.397154196.0000000005B60000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B60000
Size:	49152

Details

Name:	00000004.00000002.359783540.0000000000482000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	482000
Size:	20480

Details

Name:	00000000.00000003.329526235.0000000007274000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7274000
Size:	8192

Details

Name:	00000028.00000003.493548682.000002AC2DBD2000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DBD2000
Size:	61440

Details

Name:	00000022.00000002.442446825.0000017AD1E3C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17AD1E3C000
Size:	65536

Details

Name:	0000001B.00000003.426030684.0000000000535000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	4096

Details

Name:	00000006.00000003.355352489.0000000005680000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5680000
Size:	49152

Details

Name:	0000002A.00000002.578194900.00007FF5ED911000.00000002.00020000.sdmp
TargetID:	42
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED911000
Size:	12288

Details

Name:	0000001B.00000002.427691807.00000000003A0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3A0000
Size:	12288

Details

Name:	00000028.00000003.482461256.000002AC2DB76000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB76000
Size:	40960

Details

Name:	00000006.00000003.482812585.0000000006992000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6992000
Size:	126976

Details

Name:	00000019.00000003.401058285.0000000005C20000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C20000
Size:	12288

Details

Name:	0000002D.00000002.574993515.00007DF5FB102000.00000002.00020000.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5FB102000
Size:	4096

Details

Name:	00000015.00000003.387952493.0000013E72A66000.00000004.00000001.sdmp
TargetID:	21
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13E72A66000
Size:	16384

Details

Name:	00000000.00000003.329285677.0000000007274000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7274000
Size:	8192

Details

Name:	00000028.00000003.478864259.000002AC2DB61000.00000004.00000001.sdmp
TargetID:	40
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2DB61000
Size:	61440

Details

Name:	0000000A.00000002.365841585.0000000000730000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	730000
Size:	16384

Details

Name:	00000014.00000003.402810284.0000000003DD8000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD8000
Size:	8192

Details

Name:	0000002D.00000002.574346958.0000028B30530000.00000004.00000001.sdmp
TargetID:	45
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28B30530000
Size:	4096

Details

Name:	00000006.00000003.404958320.000000000699F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	699F000
Size:	131072

Details

Name:	0000001B.00000000.396670700.00000000FF282000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF282000
Size:	4096

Details

Name:	00000004.00000002.360216714.0000000000FEF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FEF000
Size:	69632

Details

Name:	0000000F.00000002.370669958.0000000000D50000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D50000
Size:	28672

Details

Name:	00000019.00000002.417143601.0000000001770000.00000004.00000001.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1770000
Size:	65536

Details

Name:	00000000.00000000.306892559.0000000000CD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	CD2000
Size:	45056

Details

Name:	0000001B.00000003.421333592.00000000004E9000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4E9000
Size:	8192

Details

Name:	0000001B.00000002.427666219.000000000038D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	38D000
Size:	8192

Details

Name:	00000026.00000002.467152295.00007FF55A15E000.00000002.00020000.sdmp
TargetID:	38
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55A15E000
Size:	4096

Details

Name:	00000015.00000002.398268937.0000013E70E3B000.00000004.00000040.sdmp
TargetID:	21
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	13E70E3B000
Size:	16384

Details

Name:	00000000.00000002.333753489.0000000000E10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E10000
Size:	4096

Details

Name:	0000000A.00000000.363540897.0000000000692000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	692000
Size:	28672

Details

Name:	00000005.00000002.363162361.00007FF5C2ED5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C2ED5000
Size:	8192

Details

Name:	00000006.00000003.354850495.0000000005081000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5081000
Size:	4096

Details

Name:	00000014.00000002.403808279.000000000143E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	143E000
Size:	8192

Details

Name:	00000019.00000002.421081058.000000007F090000.00000002.00020000.sdmp
TargetID:	25
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F090000
Size:	4096

Details

Name:	00000006.00000002.579774473.00000000055F5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55F5000
Size:	12288

Details

Name:	00000004.00000003.357737469.00000000036EF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EF000
Size:	20480

Details

Name:	0000000F.00000002.370717601.0000000000D85000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D85000
Size:	184320

Details

Name:	00000006.00000002.576610199.0000000002EC0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EC0000
Size:	40960

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

Domains

IPs

Registry

Memdumps