{ "analysis_details": { "creation_time": "2018-02-13 18:15 (UTC+1)", "execution_successful": true, "number_of_processes": 3, "reputation_enabled": true, "termination_reason": "timeout", "type": "analysis_details", "version": 2, "vm_analysis_duration_time": "00:03:41" }, "artifacts": { "files": [ { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe", "hashes": [ { "md5_hash": "a6a97f17880e37067c822e14a75bb3af", "sha1_hash": "1aab183abb65685af92b201a2e47ba3d9ce0856e", "sha256_hash": "b1eeec190113584579fe9376b88933d5e1871b3e8fdc86d8a490db4d044196ac", "type": "file_hash", "version": 1 } ], "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "operations": [ "access" ], "type": "file_artifact", "version": 1 }, { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", "hashes": [], "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data", "operations": [ "access", "read" ], "type": "file_artifact", "version": 1 }, { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Roaming\\98E541\\12EEF2.hdb", "hashes": [ { "md5_hash": "aced026ed487b5cbb298f9ab09e6f1c1", "sha1_hash": "1ceff0fbc90b0f2c6fab37bcde68f2a9170a7cf8", "sha256_hash": "c22bcce160e0645d030b554a30a0671bc2b2f30b1654dcd4111d871bb9c8e6bf", "type": "file_hash", "version": 1 } ], "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\98e541\\12eef2.hdb", "operations": [ "write", "access" ], "type": "file_artifact", "version": 1 }, { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Roaming\\98E541\\12EEF2.lck", "hashes": [], "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\98e541\\12eef2.lck", "operations": [ "access" ], "type": "file_artifact", "version": 1 }, { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Roaming\\98E541\\12EEF2.exe", "hashes": [ { "md5_hash": "a6a97f17880e37067c822e14a75bb3af", "sha1_hash": "1aab183abb65685af92b201a2e47ba3d9ce0856e", "sha256_hash": "b1eeec190113584579fe9376b88933d5e1871b3e8fdc86d8a490db4d044196ac", "type": "file_hash", "version": 1 } ], "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\98e541\\12eef2.exe", "operations": [ "access" ], "type": "file_artifact", "version": 1 } ], "ips": [ { "ip_address": "101.99.75.184", "type": "ip_address_artifact", "version": 1 } ], "mutexes": [ { "mutex_name": "73EE9CC98E5412EEF2B9A336", "operations": [ "access" ], "type": "mutex_artifact", "version": 1 } ], "registry": [ { "operations": [ "access" ], "reg_key_name": "HKEY_CURRENT_USER\\Software\\Borland\\Locales", "type": "registry_artifact", "version": 1 }, { "operations": [ "access" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\Software\\Borland\\Locales", "type": "registry_artifact", "version": 1 }, { "operations": [ "access" ], "reg_key_name": "HKEY_CURRENT_USER\\Software\\Borland\\Delphi\\Locales", "type": "registry_artifact", "version": 1 }, { "operations": [ "access", "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography", "type": "registry_artifact", "version": 1 }, { "operations": [ "access" ], "reg_key_name": "HKEY_CURRENT_USER\\Software\\QtWeb.NET\\QtWeb Internet Browser\\AutoComplete", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Mozilla Firefox", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\ComodoGroup\\IceDragon\\Setup", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Apple Computer, Inc.\\Safari", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\K-Meleon", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\mozilla.org\\SeaMonkey", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\SeaMonkey", "type": "registry_artifact", "version": 1 }, { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Flock", "type": "registry_artifact", "version": 1 }, { "operations": [ "write" ], "reg_key_name": "HKEY_CURRENT_USER\\\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u0414\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u045c\ufffd\ufffd\u040b\ufffd\ufffd\ufffd\u042f\ufffd\ufffd\ufffd\ufffd\u0419\ufffd\ufffd\ufffd\u0419\ufffd\ufffd\u044f\ufffd\ufffd", "type": "registry_artifact", "version": 1 } ], "type": "artifacts", "urls": [ { "operations": null, "type": "url_artifact", "url": "http://kdotraky.com/kat/val.exe", "version": 1 }, { "operations": "POST", "type": "url_artifact", "url": "kdotraky.com/temp/Panel/five/fre.php", "version": 1 } ], "version": 1 }, "extracted_files": [ { "archive_path": "extracted_files/1aab183abb65685af92b201a2e47ba3d9ce0856e", "file_type": "created_file", "id": "file_3", "md5_hash": "a6a97f17880e37067c822e14a75bb3af", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "sha1_hash": "1aab183abb65685af92b201a2e47ba3d9ce0856e", "sha256_hash": "b1eeec190113584579fe9376b88933d5e1871b3e8fdc86d8a490db4d044196ac", "size": 734720, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/1aab183abb65685af92b201a2e47ba3d9ce0856e", "file_type": "created_file", "id": "file_11", "md5_hash": "a6a97f17880e37067c822e14a75bb3af", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\98e541\\12eef2.exe", "sha1_hash": "1aab183abb65685af92b201a2e47ba3d9ce0856e", "sha256_hash": "b1eeec190113584579fe9376b88933d5e1871b3e8fdc86d8a490db4d044196ac", "size": 734720, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/6b3d33e00f5b9deae2826f80644cb4f6e78b7401", "file_type": "created_file", "id": "file_4", "md5_hash": "884bb48a55da67b4812805cb8905277d", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1534390919-4215197118-2202912847-1000\\31665589e43aaafc284e70c59b175d25_7c68ff26-a003-470d-b2af-255a5acd32f2", "sha1_hash": "6b3d33e00f5b9deae2826f80644cb4f6e78b7401", "sha256_hash": "78877fa898f0b4c45c9c33ae941e40617ad7c8657a307db62bc5691f92f4f60e", "size": 49, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/2c83b907fabea29308a58c94b3a9a128acd48ceb", "file_type": "created_file", "id": "file_5", "md5_hash": "5c2c94ca91d5485579b54b3a7b19b805", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1534390919-4215197118-2202912847-1000\\31665589e43aaafc284e70c59b175d25_7c68ff26-a003-470d-b2af-255a5acd32f2", "sha1_hash": "2c83b907fabea29308a58c94b3a9a128acd48ceb", "sha256_hash": "3cdf206ecf28d38a849329a7ff4e3acf3edc35a83f7692ef0074984dcbedb326", "size": 49, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/1ceff0fbc90b0f2c6fab37bcde68f2a9170a7cf8", "file_type": "created_file", "id": "file_6", "md5_hash": "aced026ed487b5cbb298f9ab09e6f1c1", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\98e541\\12eef2.hdb", "sha1_hash": "1ceff0fbc90b0f2c6fab37bcde68f2a9170a7cf8", "sha256_hash": "c22bcce160e0645d030b554a30a0671bc2b2f30b1654dcd4111d871bb9c8e6bf", "size": 4, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/1aab183abb65685af92b201a2e47ba3d9ce0856e", "file_type": "modified_file", "id": "file_2", "md5_hash": "a6a97f17880e37067c822e14a75bb3af", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\val[1].exe", "sha1_hash": "1aab183abb65685af92b201a2e47ba3d9ce0856e", "sha256_hash": "b1eeec190113584579fe9376b88933d5e1871b3e8fdc86d8a490db4d044196ac", "size": 734720, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/12ba75e806dfe5dcbca7823687f346fa2472ae4e", "file_type": "modified_file", "id": "file_20", "md5_hash": "86b0d3bf293c31bdeff2b05ab254a73d", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat", "sha1_hash": "12ba75e806dfe5dcbca7823687f346fa2472ae4e", "sha256_hash": "8c96bbdc62be3d2d80f68c2b2a1bf722bed33b74215ede1b5f49eaca3012eced", "size": 98304, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/2923612b74c7443ffe8a54f4b2d1fe0bd6dae0bb", "file_type": "modified_file", "id": "file_21", "md5_hash": "7c83dbeeb7811a904009ba7d48993c65", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat", "sha1_hash": "2923612b74c7443ffe8a54f4b2d1fe0bd6dae0bb", "sha256_hash": "33e7b8ec336fc1fc62e773ae74239f51b20e756958af32dbfc193a7cfa5f929b", "size": 32768, "type": "extracted_file", "version": 1 }, { "archive_path": "extracted_files/fc6b4901d1575a9c013db2d9e2f3932d8a86b35f", "file_type": "modified_file", "id": "file_22", "md5_hash": "ef02ff50bdc43aeed96d1da34418794b", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat", "sha1_hash": "fc6b4901d1575a9c013db2d9e2f3932d8a86b35f", "sha256_hash": "4e6dccaa3e91b08212ec5adef0881a0f13b739e8811d13a8bb75df85e2ee54c0", "size": 49152, "type": "extracted_file", "version": 1 } ], "process_dumps": [ { "archive_path": "process_dumps/process_00000001-region_00000137-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000137-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_23", "md5_hash": "49ffb0aa163b9dd7ea12a14ba63a1fbc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "985ff09a0cd618b29d7e6bbbcd64367d59124de7", "sha256_hash": "217b21dc808cff6f32606249f5ae299be87e070b2b877e840c0f81b3bd3b5879", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000141-addr_0x0000000000070000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000141-addr_0x0000000000070000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_24", "md5_hash": "41239f16037c8f3ee9cf63d4b0e1b55b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "eeb8f4c23a4a15656bb7d9609f9c90ca1d66b140", "sha256_hash": "fe8bd32012dc2519d66b4ce19160ef8ce5c2d5eb1123164d054546322cb52ea4", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000143-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000143-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_25", "md5_hash": "76c7d6bbb39a8bb5c4483ac30c422df4", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d98a580b96561ea0a333969d26ab2220ad2bac2f", "sha256_hash": "a8c5c884491e5bb758426e55c585af3fb4271f546a0065958e55a5813549f509", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000144-addr_0x0000000000190000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000144-addr_0x0000000000190000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_26", "md5_hash": "6756dc56b6fcbf85303da42d2f8d54b8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "734cd67bf8a3a207222564a8d0b426d0835306ca", "sha256_hash": "0ebd7986a48467bb7891b8baa7ded2ddff4b0f550cbadc3d93188fa5b543bc2b", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000146-addr_0x0000000000240000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000146-addr_0x0000000000240000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_27", "md5_hash": "cff07c688b1b03c34fefa3f8f0b9e40d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7fae54d831622c36681ea3f83ec15d5a706fad71", "sha256_hash": "f72264bcd79aaffc7d7e79c4ef21c5efcd8c873ac9145c5d5fffbccb014ef527", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000147-addr_0x0000000000250000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000147-addr_0x0000000000250000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_28", "md5_hash": "1834f4c94d76670d3421495757a816a1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9449e28382f2ef74060c56a6daec8c7901c40b95", "sha256_hash": "bed08593fa1bf611f608b72e375fba2fd36709e67c7a9bb48e820288113f44f5", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000148-addr_0x0000000000260000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000148-addr_0x0000000000260000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_29", "md5_hash": "e5e5b6d0718320f9b1a28ab0cde254a7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "897ce54293b418822ae6cf610cede003bce8b55c", "sha256_hash": "ba45a86c0caab33483f0259fb54931a6edb2012e58bdb72b9a38992a221ef4fd", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000149-addr_0x0000000000270000-size_0x0000000000018000-perm_rw.bin", "filename": "process_00000001-region_00000149-addr_0x0000000000270000-size_0x0000000000018000-perm_rw.bin", "id": "proc_dump_30", "md5_hash": "4bb635d4b9b8b8cb827654b4f138ee33", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "669e397eeb3577f633c2e57ea80da69a257cdb6b", "sha256_hash": "7ed79faa6e4ac71b8d834793ef394158966d59f24d18f3c308218cfa6159647b", "size": 98304, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000150-addr_0x0000000000290000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000150-addr_0x0000000000290000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_31", "md5_hash": "1b9dded07b929b910b0d320cf5adf137", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7542c7f627ed878d72dd9b959f2d5c9a0043a150", "sha256_hash": "e159a1fb87b1f44a9646a3b510f1ad27b6156753b1d60459594fbc6c14e0d028", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000151-addr_0x00000000002a0000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000151-addr_0x00000000002a0000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_32", "md5_hash": "7b9dc97d936254bae1e69b73862b9481", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e3bfb1555373f0b1797f45224649edf87f9037b2", "sha256_hash": "978ffced4e99072a4383b37b8d8ef30357701e401049fc54a09da6034472a22c", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000152-addr_0x00000000002b0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000152-addr_0x00000000002b0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_33", "md5_hash": "3c831323bad3bccda428621d268fff4e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8f02e041d3f6d29406f34ad0a3f5ed6a88dd9ad7", "sha256_hash": "add579d11881cccaf522988e3fa8aace06c2e240372aab38939a7e2ca5dd62f4", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000153-addr_0x00000000002c0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000153-addr_0x00000000002c0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_34", "md5_hash": "eee548754bcfcd59b1fc5469f5a198e2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8c42d7657ba2d135a975b5c52e2a88953db480bb", "sha256_hash": "8672e56f201a02ba66d79f6512d172cc99f0b5e36d52fa7c74dc827fbeb9484a", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000154-addr_0x00000000002d0000-size_0x0000000000080000-perm_rw.bin", "filename": "process_00000001-region_00000154-addr_0x00000000002d0000-size_0x0000000000080000-perm_rw.bin", "id": "proc_dump_35", "md5_hash": "7dfd3ff9e61af75f4a5a2decaab8fdfe", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5e32766113db08e704632ec293ee856bb68039b6", "sha256_hash": "2eb04a9591f78a00b3f7e8dc8bec798251dededfbd07950ee60fd29c0b098830", "size": 524288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000155-addr_0x0000000000350000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000155-addr_0x0000000000350000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_36", "md5_hash": "89fe4047d1dbd26da8c66b4e5c437bdb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d3c912a05c408087ccbd8f39e5eb0d2e98adb837", "sha256_hash": "48208541f4c89eac085566d98ea1487f85a564a015f0fdc33e790daa67243fee", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000156-addr_0x0000000000360000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000156-addr_0x0000000000360000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_37", "md5_hash": "175d866db58db9203ed0a73f7597d10d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "67ce7d83f5cf6f0f1eebc5c95e7754e15b07b209", "sha256_hash": "56d1ef92aff9497223d62f636dc72228640b75c8b2adb17d047f7ac4bbe2a383", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000157-addr_0x0000000000370000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000157-addr_0x0000000000370000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_38", "md5_hash": "33fa3aa7dd3d2cd2d332ab50336f6d44", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5382c9f7d759f2e4f72061a1cad2caa3cbd4e64e", "sha256_hash": "825ed81accb0477c3c305126e9fd5bbbeb64fc26d48f179596cd0e39737a2c23", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000158-addr_0x0000000000380000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000158-addr_0x0000000000380000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_39", "md5_hash": "7e571b632cc33f7343c2aae7176a3cd8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "497533b8cd466c85f2bb4ecab0b069bb3e787b40", "sha256_hash": "a79dad1746b458757e83f4820fbb2753ce84520c82b6fb3db4b93a4b820a10d3", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000159-addr_0x0000000000390000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000159-addr_0x0000000000390000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_40", "md5_hash": "b5c7fb05a183fee501a8d522bd4b30ee", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a143602431a67900e5f98395df2564b4196addaf", "sha256_hash": "ccc96e4f863b303d5f0b063283996a9006a5e8d97fa1fbf62214c255d4dd0ee8", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000160-addr_0x00000000003a0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000160-addr_0x00000000003a0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_41", "md5_hash": "54f8bf587cbd3509e447960cf6e04f26", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4eb85625bd5d087959c900dec75cde35198a6c01", "sha256_hash": "32178f1e99f34cebb1936006dc121fcf35d5506087470c129cd540164ab7c914", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000161-addr_0x00000000003b0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000161-addr_0x00000000003b0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_42", "md5_hash": "51a3f808693a3fe554165b2907188f8e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b9d16d6f20543dc469e06b5f6148523299613f1e", "sha256_hash": "b93c4bae914b092274bf6d50f074eaca079739e7b3a4953a50244e0a71fcb61d", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000162-addr_0x00000000003c0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000162-addr_0x00000000003c0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_43", "md5_hash": "a5a27762fd0374c13f76c96d5106ae69", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "892f21936a9f67972e67e3a4c1f0f2534fe4f08c", "sha256_hash": "4c473d74585057907ee6f3cf20bc57dbb286a839ad610a87d80225d348e471a9", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000163-addr_0x00000000003d0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000163-addr_0x00000000003d0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_44", "md5_hash": "0c4a80cd1ee5433877109d0af3f45d35", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a4b1933b98d12f166c599228309af833d46cb340", "sha256_hash": "83352899f404a4d5fe5daab41dcf9bbeaab31e23f33085b4e767f9656ff75e29", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000164-addr_0x00000000003e0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000164-addr_0x00000000003e0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_45", "md5_hash": "fc3e845fe5da7ba964452ca9e6a1a42b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e093dd29faaa80f6b15eb328fcb752e246ceba99", "sha256_hash": "2aa3d5208f87512e3fc62b03ba7a1ebc0fe8607f579486366b318381ad165a4a", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000165-addr_0x00000000003f0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000165-addr_0x00000000003f0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_46", "md5_hash": "1828fbbc19f754aeaf70f6d9f30d0ea3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1107caeed9d6a604e05b6e6e08ca2e0a7870a8f1", "sha256_hash": "c603e0020de6c194d3ddcd784e45dcbc3be76fb4a2b580733cca3c4da8d7354c", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000166-addr_0x0000000000400000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000166-addr_0x0000000000400000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_47", "md5_hash": "1b96603f6f8f6818f15acb8becbf2067", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fc672a368268b75dfdacb63653e4b608fbc85268", "sha256_hash": "88ae504dcfd524df258399bab78e479c988b49171291973168f69ad602f8166b", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000168-addr_0x0000000000420000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000168-addr_0x0000000000420000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_48", "md5_hash": "efa721d540292bd2c3ae648467eb6b5f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "376133858ca47e6f1d1d54d95e02d05fb42e6f32", "sha256_hash": "7d6dfe65bd03e3d876d19b7cfa5a474a9702dd71a850cd3f0a0037ff15f041f0", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000169-addr_0x0000000000430000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000169-addr_0x0000000000430000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_49", "md5_hash": "c1ac43f32b8f7687c527457f51f59d29", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d2a13c416549c3929de974bb7705db94b2d3f6df", "sha256_hash": "b47c0f572e82efa5322d8ef94a4a34197e314104cbbff65817bd617431549741", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000171-addr_0x0000000000450000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000171-addr_0x0000000000450000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_50", "md5_hash": "9c84973b6c1b39afa9ebd22ad4125a58", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "632d22047721ba827c5c4b86f32cb1117f262b6c", "sha256_hash": "e00075e19cfafa1de325da543ff6b3e4d62140f27cef71dcb82892b1bd3520f5", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000176-addr_0x0000000001e20000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000176-addr_0x0000000001e20000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_51", "md5_hash": "f231e7842779ad5541a4de5a9ed451f7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ab59d4e53501066d3e5bdf24a95172dc9544bcc2", "sha256_hash": "52895432464aea8a8682ede328b0d478daaa645d3c360bf73473db4504e86dfe", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000177-addr_0x0000000001e30000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000177-addr_0x0000000001e30000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_52", "md5_hash": "d0eccfa54be8c5fc77240967a4dd986f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ab095692b2f84a9169d127d333013b158ab0fcfa", "sha256_hash": "4a7cfac9c7f9855b317082959ce8c99ddb352b601882eb1e94fd69b03454a8a5", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000178-addr_0x0000000001e40000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000178-addr_0x0000000001e40000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_53", "md5_hash": "591cf17718f205b26e07d2ba9c4c7435", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0143ce0f04eecfd82999f556c37e7842b23a9011", "sha256_hash": "25e216c1588f99d7ca26d64e3ee1d2038314c3bf987a5fdca5e94b69cdb9ad45", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000180-addr_0x0000000002090000-size_0x0000000000020000-perm_rw.bin", "filename": "process_00000001-region_00000180-addr_0x0000000002090000-size_0x0000000000020000-perm_rw.bin", "id": "proc_dump_54", "md5_hash": "7b8d8979176c23aeaf3ef7f885471401", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "619422cb4be4dfb2fe4cb60c42f532bd93cbf893", "sha256_hash": "9d782aa0bb892d6a80ab58349fbb8c5e881555d5910f4c43775d4b39d80dae0f", "size": 131072, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000183-addr_0x00000000020d0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000183-addr_0x00000000020d0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_55", "md5_hash": "68530feffa2415ceb50003bc99e5a99a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cd58b67f5022b8731f95245e8f8158c1be135be8", "sha256_hash": "ad82f5789f5f5f087df064a911884ec5fa4b417f1bdb2b57fd6adfd8a36e2c63", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000184-addr_0x0000000002110000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000184-addr_0x0000000002110000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_56", "md5_hash": "c33729aaadb923a69ed2a18054bcf519", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "363ee78000168613520680e26808c33953b1f4e2", "sha256_hash": "80421cb865c41b6657768132bd3de0f8118c87924be683003f0da3707b3a7ea3", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000187-addr_0x0000000002500000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000187-addr_0x0000000002500000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_57", "md5_hash": "5395c2a1cc5ce7168bd0485ef90d437e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d748b54756b02318eb027e98b2914e01f555264c", "sha256_hash": "5e52c7109b065a0948826b52bddc92516ca4fe45117a0cee7d37ed9ca829ff8a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000190-addr_0x0000000002530000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000190-addr_0x0000000002530000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_58", "md5_hash": "ee23ebcdf30773ad228ced9b0382ca5f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "abc4eb37012bc006e7c074dc4669c9787c092094", "sha256_hash": "a31781706913074a03ae54e332736e28cf738650071cefd0c3116b2550f1f0bc", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000191-addr_0x0000000002540000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000191-addr_0x0000000002540000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_59", "md5_hash": "8b2e4b2731b1b995d03c0bcce0942c1a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "60242de0070bf3b7932cd2d8fa634b5f473070e3", "sha256_hash": "47b05d72793f0d59f9b73fb559221b40af273e1e4ad97121e075a10016ecce14", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000192-addr_0x0000000002550000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000192-addr_0x0000000002550000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_60", "md5_hash": "9ab9990f8594820e425a939bc7942ef6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3b3cc86c8eef77880a4fe646403cdabe30c59b55", "sha256_hash": "42abe5f90840085711d69de9b073f3f5a5a590427074b464cc2b7cd32135a4cd", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000193-addr_0x0000000002560000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000193-addr_0x0000000002560000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_61", "md5_hash": "24b0eccec25b564700105b0954ac7d3b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4475308facba186a805e5016f9d5db897c8ffe39", "sha256_hash": "38ee660fd1a519adc4114feaeec57f6e35ec857361144955a7d9a212715f69ca", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000194-addr_0x0000000002570000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000194-addr_0x0000000002570000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_62", "md5_hash": "332571ae3dcdf1e237a8cefb6298c879", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "949ac65792a3b4844a162c6dcda1ecdffcc1cd07", "sha256_hash": "2542f768cd7fbf3bf687eb0975cfe8a0f38c37f1498620b7c7eba32c3efe317a", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000196-addr_0x0000000002ee0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000196-addr_0x0000000002ee0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_63", "md5_hash": "406ac5a793134b2bd7c1b339a1b67cdb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d3841a44d2a38588e209f8f98a2a04b75669acfb", "sha256_hash": "c74058aa49f31e8e8b2c5bf9e35e0afcb51e034b4469d1902d8bbdafa2859609", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000197-addr_0x0000000002ef0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000197-addr_0x0000000002ef0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_64", "md5_hash": "8959d5d3cbd309cc8ea957beb2569d80", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "14ef3e28f01badc401ac7f32fc5f38c404902df4", "sha256_hash": "e5a93680e677a63eadc0566725fa19770ad8ce1d8468ac1d0652868a5d3905d8", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000198-addr_0x0000000002f00000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000198-addr_0x0000000002f00000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_65", "md5_hash": "66339ffb85b9928f924d106a5349d181", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4686093f12b5d65a41bb6f10050d6ffbb9c1d7b0", "sha256_hash": "0e1b33d55fb102c5e427966b8a6d73e0a9127c50ce4b3368d640a2464338794d", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000199-addr_0x0000000002f40000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000199-addr_0x0000000002f40000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_66", "md5_hash": "4a06dbd8a9561be6e6f2d718005890bb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f26f263bd6509cb2c1bebb4fdb84668b13b663a0", "sha256_hash": "0492a29ecdefc2277d1e17a378aa86b6c295872882c3ea8a0ed094b86ee7be35", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000202-addr_0x0000000002f70000-size_0x0000000000001000-perm_rwx.bin", "filename": "process_00000001-region_00000202-addr_0x0000000002f70000-size_0x0000000000001000-perm_rwx.bin", "id": "proc_dump_67", "md5_hash": "30513cc68a7d1e44c19f4e8b3bf0877a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cb44463186b17201ac1b8c603fb7a6c17b27aeb9", "sha256_hash": "d0c8d11ad9a0515fe289792bc28b69f3e84ce780018db65c6d627cb843b20389", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000203-addr_0x0000000002f80000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000203-addr_0x0000000002f80000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_68", "md5_hash": "15dedfcd81a777ecf14633d96e0e9e47", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8c387f9b14d7f770e6a102bce9ad8b7def14cd43", "sha256_hash": "7b0d0a91cb7e00b02e5311dd86a3e4fd23fa3f25c11955288541a00fd8b02695", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000204-addr_0x0000000002fc0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000204-addr_0x0000000002fc0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_69", "md5_hash": "ddd0ce2222c7412bfba366a454adb041", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3a0fe92dfbc20c8d3c8f44bc920e4115b6fe22e2", "sha256_hash": "210a7513b55efe58ad64de8a664ec38b50f0048d1d409d8d19b70faf25fa468e", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000205-addr_0x0000000002fd0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000205-addr_0x0000000002fd0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_70", "md5_hash": "748b0d1f91205830412b1643f84cdcc3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9a37909a446f4acaa0e4e77f23cfd8b3b4114c36", "sha256_hash": "19b219a5bf546b75d502266ab7520197f985deb5231be3c39ce05cd335d339d9", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000206-addr_0x0000000002fe0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000206-addr_0x0000000002fe0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_71", "md5_hash": "6a366cfaa129f8eee8ba8f95c8a4fc91", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8c64b6bd743c6fa40f059330d1dd61ef4ee558a2", "sha256_hash": "74dbfd039d4e92e98ff596a75627ca77f55c4d827b18070cab27c89317eedcbc", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000207-addr_0x00000000030e0000-size_0x0000000000080000-perm_rw.bin", "filename": "process_00000001-region_00000207-addr_0x00000000030e0000-size_0x0000000000080000-perm_rw.bin", "id": "proc_dump_72", "md5_hash": "2f9b90438e11c22205c864a17302ffc1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "12ff00ad9769d025236d19522fb4557faa8c23c4", "sha256_hash": "d80714b0099e684471d8c4fbbf12dd47d4db2b3b27fc28948355914bf4df267f", "size": 524288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000208-addr_0x0000000003160000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000208-addr_0x0000000003160000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_73", "md5_hash": "1571e99a211b294cccdf481f3080c4a3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b2737d495cbc611969630343ac03e4f1b99b7ea1", "sha256_hash": "618d6b83b6225549f5dcf8be8eeed27d0f453430598a16478c7f151b5dacd334", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000209-addr_0x0000000003260000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000209-addr_0x0000000003260000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_74", "md5_hash": "9131e265a9cc9038c5bb1e742f583eaa", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3d4ce7468ff0c6cbdecf6e52f13dea1fb48e5121", "sha256_hash": "e5fe7e493ea87cf5f666b8c0acbf1ec28cf6f034ba34f86991e0beb749c6127f", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000210-addr_0x0000000003270000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000210-addr_0x0000000003270000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_75", "md5_hash": "5b43aa354be73d30857f328d2d14788b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "66f99edd99dc060941866cdcc0bbcc32ce7e5657", "sha256_hash": "f609148805b04a6e79a1337b69ce12fb44bcd80bdf64e41f869c9919751d5859", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000211-addr_0x0000000003280000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000211-addr_0x0000000003280000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_76", "md5_hash": "c21f9ec2b9b17f93d55b55b52060adc9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c1311a6179c2647bed2f6e5045ff0ad79dbcc0da", "sha256_hash": "9e973782127833cdef286220ba7c9bc5922cc8dc8f1d72f141b4429596453669", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000212-addr_0x0000000003380000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000212-addr_0x0000000003380000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_77", "md5_hash": "f00a4662d61d55e91c2cc4fd49a81d63", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e03074613809bfc44e735fadd4bc20b150562aff", "sha256_hash": "f707f4f03aa177b614a83c550262f3e9f7dafbf19ccbbcf96ac01d1b3872e7e0", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000213-addr_0x0000000003390000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000213-addr_0x0000000003390000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_78", "md5_hash": "cb06e9674b03dce0bcb5ad87695837a9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "767cf4267155d7766b7b7c4e97edddd63542cc30", "sha256_hash": "785b7da79c8cc44b812d415d0d10a21db3f0b5bf171ca7047c12b7fe2c4ed4e3", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000214-addr_0x00000000033a0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000214-addr_0x00000000033a0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_79", "md5_hash": "d3a9876b504499dce488791f340a31af", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7f2b674d4376b51321c88a028a3dc36acfbadbef", "sha256_hash": "7f99874a0318893443c6f329ac20fd3ffd3fdd17d88fe80f15beeaf457975fe3", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000215-addr_0x00000000033b0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000215-addr_0x00000000033b0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_80", "md5_hash": "2ea58030e46274deb34313128330b15c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "850ce7361d04c183c6b82e3ed6048d324fc8daa6", "sha256_hash": "818d36038444ec242bff2609571e7139f5943fb065aa52d867cd10cb1bdb89d6", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000216-addr_0x00000000033c0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000216-addr_0x00000000033c0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_81", "md5_hash": "4691a8df90185b2981d723c22c9cfbd6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e95ed09942ef97b717d48a28b69ae50b505b50ee", "sha256_hash": "b647e8b2de0961708eb4ceb9b8a7f9b4578f417e15e1d65ab0dd6e1f7b0f4948", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000217-addr_0x00000000033d0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000217-addr_0x00000000033d0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_82", "md5_hash": "08d2a8edf08cadef1e6f34ac367e60cf", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "04a3a2b8e44b765923e1f5a67db3ea9096ff4f51", "sha256_hash": "ce9171686988a984fee32228451155200a5e5e266634d0a6dd12e38a9e3f0d21", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000218-addr_0x00000000033e0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000218-addr_0x00000000033e0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_83", "md5_hash": "1f6efa68aaf32da0367c1013b339663e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3bd166415a2d21bd9efb8e27f2d1746418afd0b0", "sha256_hash": "8569792febd74141e39c19c8761ef752170a51c40aac5c48bcce398efb3f19c1", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000219-addr_0x00000000033f0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000219-addr_0x00000000033f0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_84", "md5_hash": "53c7c6d77b160d5741cc6b763289fed6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "486aad0c970a68eff24a432f2d3296efb1a99f19", "sha256_hash": "c4b409574e770e2f2c61c3a80b7a75b25764d4d4e51477bd47ecb88daeff06d3", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000220-addr_0x0000000003400000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000220-addr_0x0000000003400000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_85", "md5_hash": "86d7a5b118ee594c4871a0e6643124fe", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "db1373173a87eb02488daef98289fce4b1deca94", "sha256_hash": "7b1367b7f3b860c3bd85a46f87a57852bb7de6da4db3fcd36b8c16518a283b7e", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000221-addr_0x0000000003410000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000001-region_00000221-addr_0x0000000003410000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_86", "md5_hash": "3b89251ff08043debf232e235e08d033", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0612c89340e7188d11de7d410634f729e32577cb", "sha256_hash": "9cfa08a7c73f84a3519eedf4544ed246622ca8ff2db075e78bbc09291e32119d", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000222-addr_0x0000000003420000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000222-addr_0x0000000003420000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_87", "md5_hash": "d339282b5ca7551b52c4e04f13e6bfa1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e3f515b4199a9bbb3ce94aa31610dde44cfb5dfc", "sha256_hash": "6238e3cea72427571e2d172eb825b6e337fe979cac9827f5e8c5bc9dc5f9e3cf", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000223-addr_0x0000000003430000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000223-addr_0x0000000003430000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_88", "md5_hash": "337c067877ff95938c45f2111b592aa0", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9b7e398e087148f8724c67471c29dda59d5a20b4", "sha256_hash": "24ecd87924fbdea16b9fbed2bf13a18a48d4f18e8e048ea21f24d97a5ea0a331", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000224-addr_0x0000000003530000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000224-addr_0x0000000003530000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_89", "md5_hash": "ea65fdbde6c78b16befab435a5dc812f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "74ceae0a23e0a81cb5739aaf6a29d3a525a59588", "sha256_hash": "5d97869bdb4008c37928bb5b45b570beaa1c4c7b4455768f94d9664df942dd7e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000225-addr_0x0000000003540000-size_0x0000000000006000-perm_rw.bin", "filename": "process_00000001-region_00000225-addr_0x0000000003540000-size_0x0000000000006000-perm_rw.bin", "id": "proc_dump_90", "md5_hash": "f135186722bdaba4cb03fffedfda1ee5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "594e1a74cd4b7913aef93cfc9feb962de63c2285", "sha256_hash": "0164e074fc82a3ab5b9a3314f6c3881daa59c78ecdde0107198225c26d592436", "size": 24576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000226-addr_0x0000000003550000-size_0x000000000000f000-perm_rw.bin", "filename": "process_00000001-region_00000226-addr_0x0000000003550000-size_0x000000000000f000-perm_rw.bin", "id": "proc_dump_91", "md5_hash": "3c1488d721ddb184c98c0a30a5430928", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c1c4d62210c89313e6d795e15fe9d372804df5a9", "sha256_hash": "9d0637b9112f8d9f2dba6a7d4b039f565ac9384b802b614817caac9d5aa48c38", "size": 61440, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000227-addr_0x0000000003560000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000227-addr_0x0000000003560000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_92", "md5_hash": "379062ec84ea277bec4a9daf1c84e140", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "bf12ab9a2e160438e93b72b0280d82565d710a70", "sha256_hash": "7efc4343672df93bcca54f89307120deebe83fb9cca87fe8c3bc66d0a78e28eb", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000228-addr_0x0000000003570000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000228-addr_0x0000000003570000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_93", "md5_hash": "200c188f4529febe3cd418b60b502057", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d83f99eaf34391acaf80172c6478e4f0c3905451", "sha256_hash": "3c1cf88f0c960973e218adf1e2dbcd47177c7b07a1ba02a74c5195c7106d222a", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000229-addr_0x0000000003580000-size_0x0000000000040000-perm_rwx.bin", "filename": "process_00000001-region_00000229-addr_0x0000000003580000-size_0x0000000000040000-perm_rwx.bin", "id": "proc_dump_94", "md5_hash": "44acb7d72eff10bf886b7eea1e70ce1f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d984a7f8a2d6a73b4fa644ac4c954a67d8fc2e0e", "sha256_hash": "fcf7ef26c2a22c540e85340106caa1db2c91d1eacec42db4aaad8e605a7f006f", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000230-addr_0x00000000035c0000-size_0x0000000000009000-perm_rw.bin", "filename": "process_00000001-region_00000230-addr_0x00000000035c0000-size_0x0000000000009000-perm_rw.bin", "id": "proc_dump_95", "md5_hash": "17a891c7fd2faed06027795abba27c6a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0c17f44b2f71ede57fcc6bd77be72fb5a25961d4", "sha256_hash": "ea4d075f14eab70cd30376b032cf42278891a2f873ccef315e997a3f75c27360", "size": 36864, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000231-addr_0x00000000035d0000-size_0x0000000000009000-perm_rw.bin", "filename": "process_00000001-region_00000231-addr_0x00000000035d0000-size_0x0000000000009000-perm_rw.bin", "id": "proc_dump_96", "md5_hash": "06619b1b98d953787ff6f617f1a8aa1e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4bad96548f0db6e3e3607d0449c55dce18905036", "sha256_hash": "7e27dcbfe68ee315d780ef60e1f25723e7f78ca80621d416f25bdf687aa6e3a3", "size": 36864, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000232-addr_0x00000000035e0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000232-addr_0x00000000035e0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_97", "md5_hash": "a3e7711f9d0752525c649be16585d914", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c31bbe7283b1f91d963722dc86339229ff64ee2c", "sha256_hash": "ecce4f5cd16f0d40469e3d5059bb109430cdf94ed0100c248ad9fa9591edd411", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000233-addr_0x00000000035f0000-size_0x0000000000009000-perm_rw.bin", "filename": "process_00000001-region_00000233-addr_0x00000000035f0000-size_0x0000000000009000-perm_rw.bin", "id": "proc_dump_98", "md5_hash": "e3f1bf27a951762038a32f2789de3cbc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b178443c770b8273d67d3e93bb9d655019fd72c0", "sha256_hash": "adc4ca3c9af11d38e08b349f6891b63036bf31df846d457b16fc0dd4bb723960", "size": 36864, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000234-addr_0x0000000003600000-size_0x0000000000040000-perm_rwx.bin", "filename": "process_00000001-region_00000234-addr_0x0000000003600000-size_0x0000000000040000-perm_rwx.bin", "id": "proc_dump_99", "md5_hash": "5c752f1296460fce90613312ba1e0d34", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "896cc819a10592d1daab321f1ac2d7544e695163", "sha256_hash": "6156bf6110d7d278ec98cc38fb15e154b629ce27ab18084a9578241a385c4ca8", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000236-addr_0x0000000003a40000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000236-addr_0x0000000003a40000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_100", "md5_hash": "b8cc02e005e278763369095a281ce0d5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "daa6b8a7c656aed39ca236b712406b324228138f", "sha256_hash": "f7966a4455fbe8160bdac517f1d5bb9558d0de5e9f8987fb4655c688ab0e142d", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000237-addr_0x0000000003a50000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000237-addr_0x0000000003a50000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_101", "md5_hash": "5269c2937888b45df179c7a39d349575", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6fbe1597e315e43d279a9a6e4997618b35afc625", "sha256_hash": "98be4abd027048df020196f0595c9430fda3432f35e5651ef169c8d207001058", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000238-addr_0x0000000003a60000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000238-addr_0x0000000003a60000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_102", "md5_hash": "9797eb72497d644abf7a805f198fb955", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2bfd0d3f0627ed74aa4c00701d042e34824bb192", "sha256_hash": "0d34d0ede871b09292b031ab3e234c5045cc677b970f11c5ac31c5350c375a1d", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000240-addr_0x0000000003a80000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000240-addr_0x0000000003a80000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_103", "md5_hash": "192a1a80bc22030b410c1d193686566b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "05f69a18f424074539020dcb6fe90f1ef7d0fe8e", "sha256_hash": "7ab8a9f96ffce76db7c080cb481b38d30ee70f743f7860e4a693f35dcc38d55a", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000241-addr_0x0000000003a90000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000241-addr_0x0000000003a90000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_104", "md5_hash": "fa13a7bb3c991ba4cefd2a01164c78de", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f34cc7e9fb80685fbd6137121c0e4eba30da0c2d", "sha256_hash": "cc13a66ea9d46fe3b5638ca895a620005e81ce29364441ea9272094c597a125c", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000242-addr_0x0000000003aa0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000242-addr_0x0000000003aa0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_105", "md5_hash": "fb41465e378d0bc13662c501e6c0c286", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "562e253f98cb8813e1585a33713e55d85428f613", "sha256_hash": "aeff1e4da54186efc018fa6cbbfa2960aeec9f6946ba9f8933f3d98629a6162e", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000244-addr_0x0000000003ac0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000244-addr_0x0000000003ac0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_106", "md5_hash": "b316bbc266dad34fabc1aa5587300bd9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5ff8e293ad2c7d36ee2ca6b03ddf333376a119d7", "sha256_hash": "240776fee73e7978e2ca459b3af2473078bfb8d18f60d571e310055f84581010", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000245-addr_0x0000000003ad0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000245-addr_0x0000000003ad0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_107", "md5_hash": "90d9f3fbd9fc1262d7051ea3f5995d62", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "25383e1c481ffd47c40d5a5f3e624ddea54f7576", "sha256_hash": "825c0b394d71039939a17ddabc0baa267b339d4d449d124a68f5435d3334f278", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000246-addr_0x0000000003ae0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000246-addr_0x0000000003ae0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_108", "md5_hash": "82665b2ece087341485a19939f18f610", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "be78f5bd562d21ed9ea8605cbef2ce197b959772", "sha256_hash": "f24c8551c7de6f8d222427fe7e01cdf83508dbfe8c1684b348e07dd907b55ea2", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000247-addr_0x0000000003af0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000247-addr_0x0000000003af0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_109", "md5_hash": "a08c19dab48c44c6b0221c16e73ad080", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ea0763c68197d87f25159ff45c9d68e0e0133e78", "sha256_hash": "846cf0fcbb8e6417f397f1e9ff472b17e5b6700e0d87eb20619df3af249dcbc6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000248-addr_0x0000000003b00000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000248-addr_0x0000000003b00000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_110", "md5_hash": "9843eeae9c360b9be8aa975601293048", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "649c69f02750dfa1198f1a200f4f51e0abc7a236", "sha256_hash": "421f21606036e401ddc87e8ab7944ebc1cadb5917f19051f17ae7ad38127bd09", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000249-addr_0x0000000003b40000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000249-addr_0x0000000003b40000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_111", "md5_hash": "1d534d15c6d8fa5ed6c34fb50a5cec80", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "209a46ac56e89f54d28a29f645534aa5ba166a82", "sha256_hash": "b223f53c330afe6b41236c4fb92c2b9ccbf491afbb003b6ea1f858cab501a399", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000250-addr_0x0000000003b80000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000250-addr_0x0000000003b80000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_112", "md5_hash": "50490f46f761ba6646a1e1c0ed3b18f2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "bc08b77057b7f8f8c4faa982cb91e0c2189d4b7e", "sha256_hash": "db014e08fea9577699a53d8fa7b5390f5674368dccdfcb49d0582db106ee54fe", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000252-addr_0x0000000003bd0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000252-addr_0x0000000003bd0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_113", "md5_hash": "f2f9cfd4545bf5684d6fbbbffb75bec1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cb92558f0690fb324b316755b3d592cd5602e212", "sha256_hash": "9b929283e8997282053d68ccbb92424e863e7001e0ff8e3588592934f8bc40be", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000253-addr_0x0000000003be0000-size_0x000000000000c000-perm_rw.bin", "filename": "process_00000001-region_00000253-addr_0x0000000003be0000-size_0x000000000000c000-perm_rw.bin", "id": "proc_dump_114", "md5_hash": "3c2d2a530b39f7bca2f06a6cc7fe3fad", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "04d6cb7c47f9118e82daeebc8783a16d4af643aa", "sha256_hash": "f4dc9f042a85c295464a62c4f2234328e85ee0508cacf1158d8a29494e1e613d", "size": 49152, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000256-addr_0x0000000003c10000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000256-addr_0x0000000003c10000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_115", "md5_hash": "a63e43aadfba065f5b396a5936737ca8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c4d7c618dfcaacf005e2c4e738631436ad6c5548", "sha256_hash": "f2efba6f8745fed2cc33bee13399a12a70c8d1c803a3b2f405060ff4b62f5d57", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000257-addr_0x0000000003d10000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000257-addr_0x0000000003d10000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_116", "md5_hash": "0b5d5eb4d7528c6499d54a8203b0ae0f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "43360e5386a6c1cdfb39493086acb9760aa25382", "sha256_hash": "68e0f0f03bacf9114926d8b2806d8b2f73ae23cb0c91f81ce3911b234bd736e8", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000258-addr_0x0000000003e10000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000258-addr_0x0000000003e10000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_117", "md5_hash": "e1db8df9b06ffaed18b7850baabb86e5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e1b6217abe247dd76b14c6eec6f3b2a4fa44a4dd", "sha256_hash": "1662659ce74a55c765146d53f431a6955c3b3e637d7ff9efa25b81e53d81dcab", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000261-addr_0x0000000003f30000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000001-region_00000261-addr_0x0000000003f30000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_118", "md5_hash": "bb0e22fa3a572cf427f76fbfde692886", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "11088bca35b397b16ce557ebcc931f83c0bd28ca", "sha256_hash": "564a62fb42663c3985dd3e88752a428c2375d1836a1d56705d5fd03ca473987a", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000262-addr_0x0000000003f40000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000262-addr_0x0000000003f40000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_119", "md5_hash": "b7da5573d1e7ae42a122c08c5ced304a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ebe21d61904d24e1f1b48a17dbcf2aa5d4d27e17", "sha256_hash": "69b3d08a82aa7ac100ed706da88ad1b34c2d9a638373aeb99ad57f844854a5bc", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000265-addr_0x0000000003f90000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000265-addr_0x0000000003f90000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_120", "md5_hash": "4f509fd6c6815ff78c8ce6725a2e25a7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "45b825cf8e350d824fe9c321d8f7262197f4dd94", "sha256_hash": "d7a1ae13a7bc3a7313ff50476be5ff2eff51889ce383c575f87f4913a2fb1ab1", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000270-addr_0x0000000004010000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000270-addr_0x0000000004010000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_121", "md5_hash": "c741dfbb5bbba48ba91c54c14c1d8d9c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5a0292f320a663d1e90e7351825a04742603f7ff", "sha256_hash": "2cee61108696987106e3bce315bc55ed91cfb69d4bc2696721a9100400651fc9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000271-addr_0x0000000004020000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000271-addr_0x0000000004020000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_122", "md5_hash": "55ca8554a0c57c3bbd449ae5e1d74210", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2adf150e3a223513fbacb819b6605da8ffd1bc0a", "sha256_hash": "a0b26adebce573ff746d316fa0548272fdc1ceb559f16ddc6288c1b7e78b1c0e", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000272-addr_0x0000000004030000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000272-addr_0x0000000004030000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_123", "md5_hash": "70ce84e0204baede0d5f596fd333a390", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "54208e8c3a2c4e4987e0278bf895823cc4caa0b4", "sha256_hash": "c0ba08127f566fe98abee336ddc6c972d7d754f4f0e94816ca6439f53d35f802", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000273-addr_0x0000000004040000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000273-addr_0x0000000004040000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_124", "md5_hash": "57c482f75f34ac3c76a266df108e5de6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5b31313f22275fb7f35171e50967ec39607e3bae", "sha256_hash": "659770d907e897f9d6ca15e8d99d1547fd6a47cd9fdcc83526361769e1183549", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000274-addr_0x0000000004080000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000274-addr_0x0000000004080000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_125", "md5_hash": "d5dff9aa1297bc8bb19592ab6b4b6d5c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b4281ba33c4e53de5f35c8a68800b7f5fd0f9493", "sha256_hash": "71c3ce090bc637eefa442c328ccd3bd6710554fada8968e279350e9bc5524f64", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000275-addr_0x0000000004090000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000275-addr_0x0000000004090000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_126", "md5_hash": "c31ca722672f3af8d3affed6c0e9cfc8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "61e1b60146fcee70b62eb69cc4073f5f198c1e79", "sha256_hash": "de59dd5dd1a46ce2d34366828e8d410102539b946f6faef2850cf889c5660dcc", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000276-addr_0x0000000004190000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000276-addr_0x0000000004190000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_127", "md5_hash": "0f67e1e6a7c28a8ce6478df64c309838", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "66da68557cc50af68288cb614f508315873ced8c", "sha256_hash": "eed6f44b3daae4749ff6de2e96241ee3f31d3e625e566d454c128078b7fc87de", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000277-addr_0x0000000004290000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000277-addr_0x0000000004290000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_128", "md5_hash": "e9068fde8f9c90db361049b08469c7fe", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "81403edab78cb80a8f634464c1dfce2130e6743f", "sha256_hash": "440ddf3442c8e8275b7f32e92d7748ab12d3e175f69743604102de74318c6a91", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000278-addr_0x00000000042a0000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000278-addr_0x00000000042a0000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_129", "md5_hash": "b112f22e2168511ea25166f26d30f351", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c9657fc13db60d3fce75c4d22e3a60b90aa3c73c", "sha256_hash": "9608a7e2f32d9d426a544b2cf7f751c7a4bfd072064a9ad242d8d1d28cb22751", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000279-addr_0x00000000042b0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000279-addr_0x00000000042b0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_130", "md5_hash": "e2d4d3b8b62830d381a64dfd98f9d349", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1f58bd5924c5e0c4dbf3bf6d776ede4eeb423000", "sha256_hash": "8e4306a1a19ba332c2f2c4f41ec597d251effc975faf6508cfb9760eca5cca47", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000280-addr_0x00000000042c0000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000001-region_00000280-addr_0x00000000042c0000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_131", "md5_hash": "1a3c88735ea04829643959132710a32f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b6c735c41179f9534d0543f751558b8687ed1033", "sha256_hash": "a78428fcbee03c4997d263580de241615e299bbd96909bb174047ff49f9626c0", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000282-addr_0x00000000042e0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000282-addr_0x00000000042e0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_132", "md5_hash": "7fc03c231cca31e749453c7f98c2b36b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "85a2e311685cce4e4e19616e5ddbea7fa1989ab6", "sha256_hash": "8d387723e2bfe4ea98bd3e4d2f7841212bfd633fcee8678a733b61cbecaa3fb3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000283-addr_0x00000000042f0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000283-addr_0x00000000042f0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_133", "md5_hash": "dc6ff0e676aa6d9130b0eac8be88c945", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "86434e47772041ea06b0dacf8a230eb070d36103", "sha256_hash": "714df22a09807af9e83f87dea873eb087443b07f5116523ea96121825f35432f", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000284-addr_0x0000000004330000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000284-addr_0x0000000004330000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_134", "md5_hash": "9a4400b801ad6aef36f07093fe9c5fef", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1187fb89aa87169b9cfff15e5bf260fb81bd17be", "sha256_hash": "a9c0d239d17da14d31d28204f12abfefc9110901d3c47ce10c9f34a3c8a0c6f1", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000285-addr_0x0000000004430000-size_0x0000000000402000-perm_rw.bin", "filename": "process_00000001-region_00000285-addr_0x0000000004430000-size_0x0000000000402000-perm_rw.bin", "id": "proc_dump_135", "md5_hash": "82726ec7fedf91ff4fc01107458ab09b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "30bfbf63a90669625972104eb42451787fc56d07", "sha256_hash": "a66a539883106aedc9bff45d110b856b34a4654ebcdfde2e4839ef81c776f101", "size": 4202496, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000286-addr_0x0000000004840000-size_0x0000000000012000-perm_rw.bin", "filename": "process_00000001-region_00000286-addr_0x0000000004840000-size_0x0000000000012000-perm_rw.bin", "id": "proc_dump_136", "md5_hash": "ebf751bb98be0b24d06114c1316aa110", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3d06e077dfc23e63e3e63003f367913dc5e90931", "sha256_hash": "17ad1c958478c2a0c54fcb9e7d81e1f3c85b5dd7a7e6d455bb9e1f64cb6b3165", "size": 73728, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000287-addr_0x0000000004860000-size_0x0000000000012000-perm_rw.bin", "filename": "process_00000001-region_00000287-addr_0x0000000004860000-size_0x0000000000012000-perm_rw.bin", "id": "proc_dump_137", "md5_hash": "6bc1f59d4fb213ca9be35ad0a9eaceeb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2fbdc28b2a05ea2b023b79bb5f136e6cd356b6bc", "sha256_hash": "61471987d8bd27861eed7e783d6af6ac1886fc50cba59640e816689c41aa476a", "size": 73728, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000288-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000288-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_138", "md5_hash": "f261423f59306c52d8632daf66979117", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "764815b5baa8e69b31b0a20468e54aa4afb0eeac", "sha256_hash": "3a5028688588e20ac51a6f25a24aae3e5d0a6038cd0484c4e3e398055552bd51", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000289-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000289-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_139", "md5_hash": "e6583fa0e9dfff62d2f7c762b6053a6f", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "031d1cdab4d46047fdbb8c308c9cd4aa189780d1", "sha256_hash": "bc6579a080751997e46f2a2a495081b17474469223cf9b61f81b4ded4ef0e98c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000290-addr_0x00000000048a0000-size_0x0000000000048000-perm_rw.bin", "filename": "process_00000001-region_00000290-addr_0x00000000048a0000-size_0x0000000000048000-perm_rw.bin", "id": "proc_dump_140", "md5_hash": "1de13b806e2b0373c83cdfa076cc0595", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5a2f6e7af3ed7438f9c31d384c223ba2889f4a71", "sha256_hash": "9fc97f728605d982dbd40fcc12b4cbf9b2cde14310e5efb0701d30b4a47d6b62", "size": 294912, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000291-addr_0x00000000048f0000-size_0x0000000000048000-perm_rw.bin", "filename": "process_00000001-region_00000291-addr_0x00000000048f0000-size_0x0000000000048000-perm_rw.bin", "id": "proc_dump_141", "md5_hash": "24f06b88b5311acc46827f236c3ac8ae", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "51f6609db9ecee03cfa9b7e5909539390baf9330", "sha256_hash": "09cd38b4a0e6941b57e95f92d073bcf42cf3f86d57c528bf7cb7fe4f5e9ccd72", "size": 294912, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000292-addr_0x0000000004940000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000292-addr_0x0000000004940000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_142", "md5_hash": "ae348c07b70508ef2c66f6478e0d352c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2ea00f1c009c685e14656556e2966649bfcb4271", "sha256_hash": "cc306c96378912fb00751ddef3455ab288a69161ab0000dc663288a6cefe1c0e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000293-addr_0x0000000004950000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000293-addr_0x0000000004950000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_143", "md5_hash": "58c6470283798d4866b0140b86621c46", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c20cb8d86d6c645cd885dab571d324bdba1fbeeb", "sha256_hash": "962d3081829ef6fd2717fa8d360bd6667d975bac2065fd43557f3c5e0bdd816c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000294-addr_0x0000000004960000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000294-addr_0x0000000004960000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_144", "md5_hash": "e704a8dfe404b6702f34d2db3daa59cb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "46711ac4587c458b94feb18278a9b62f6e8cf89e", "sha256_hash": "35c169c3a7655fdad15bfe17eb84a633fe5e06bf3a832944a018f68fa13f804b", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000295-addr_0x0000000004970000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000295-addr_0x0000000004970000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_145", "md5_hash": "07e56cb6794e87f81e81be73d98f8d18", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "66a50e5ff8b9b36ad6de6a99e32ee7d178e74326", "sha256_hash": "8f7ba6bd4b9f7fb15877cd64358129ce7c384db21cb071316f4a691f7328ac86", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000296-addr_0x00000000049b0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000296-addr_0x00000000049b0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_146", "md5_hash": "9e466402d16234d8c6e9b9d31d811ad1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8143b97f6a2c2ed051c5a1f2350d7204d7ec210d", "sha256_hash": "4a3497b76734c04808b33097c0fef5f3ec87d6b872b2c503478de28be386ac82", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000297-addr_0x00000000049c0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000297-addr_0x00000000049c0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_147", "md5_hash": "262979b5fd55a1c01ac7da5766205c56", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3d69b5bfa991c340b5ce044b28eb5dd87b7cda5a", "sha256_hash": "f1e36bc29c303fcd1309900af4550995afd60a2d5782bb7dbfa046d55041fa0b", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000298-addr_0x00000000049d0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000298-addr_0x00000000049d0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_148", "md5_hash": "135f7f7045df4d74fabd26d021f70f8c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "030c66cd89f1e3ffdcd7e12e2736a66da1fc603c", "sha256_hash": "c82dafe4f5fe2e40007d684f5732e816cfc5c7ae163961123df2894814821a53", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000299-addr_0x0000000004ad0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000299-addr_0x0000000004ad0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_149", "md5_hash": "4420edb594e9f33c9e3be3fd83d78e75", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8ba60ccd385731e9b7e81c7985490e17025dc56c", "sha256_hash": "41a3bcc848532a59f4f88162aadb33d9b59d5d36715a11035430e207415220a1", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000302-addr_0x0000000004bf0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000302-addr_0x0000000004bf0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_150", "md5_hash": "cdfa9f71039947f8a0a67c3f04b3e8f8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ed17e1d1e96453908f9aa2b836827d123633c8fd", "sha256_hash": "d5441a459022cb1632a97338d295ab226bbbe0e0f2c3a5178254e5272273ef3b", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000303-addr_0x0000000004c30000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000303-addr_0x0000000004c30000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_151", "md5_hash": "e7a82302e7fe36f1bc37912a139c18d9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6403c6e99d9a3590932c78536a49a8eb8074b8b9", "sha256_hash": "fca0f2b85f54655e9be7fae0dc09c2ac1dc12defe0136c1982733164cbe04b44", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000304-addr_0x0000000004c40000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000304-addr_0x0000000004c40000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_152", "md5_hash": "100846415df1d354857a1ee4be9b1719", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b2b8f8fe049f78d65a0b4c9eecf045bbeed129ae", "sha256_hash": "f963610999a7ba96a25976746da9fa4e4be56065544f9e3ae3f34ccfebd617dc", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000305-addr_0x0000000004c50000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000305-addr_0x0000000004c50000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_153", "md5_hash": "bfab9788e9565cb7f8ca91978d47e8e5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6559d145baeaa33e4c44a9daabf4e2b17051aa30", "sha256_hash": "57be04ff0b1ea347626fa6f19e8b5b6cf8d50887ab12d5299d900b60ca82cbc1", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000306-addr_0x0000000004c60000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000306-addr_0x0000000004c60000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_154", "md5_hash": "bfab9788e9565cb7f8ca91978d47e8e5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6559d145baeaa33e4c44a9daabf4e2b17051aa30", "sha256_hash": "57be04ff0b1ea347626fa6f19e8b5b6cf8d50887ab12d5299d900b60ca82cbc1", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000307-addr_0x0000000004c70000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000307-addr_0x0000000004c70000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_155", "md5_hash": "b1d05419e01c4f755b6dbdd20ee88400", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "72072ae970ffd28f9a4654e709dfa6cbb60c0908", "sha256_hash": "106de9ac3b7c5ca0769f91231fba3ad0fd6a59185356374adadfa33bd6dc3526", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000308-addr_0x0000000004c80000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000308-addr_0x0000000004c80000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_156", "md5_hash": "b1d05419e01c4f755b6dbdd20ee88400", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "72072ae970ffd28f9a4654e709dfa6cbb60c0908", "sha256_hash": "106de9ac3b7c5ca0769f91231fba3ad0fd6a59185356374adadfa33bd6dc3526", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000309-addr_0x0000000004c90000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000309-addr_0x0000000004c90000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_157", "md5_hash": "8d631c56b28cf0abb0948d990d7acae3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "07071c3a0581c7c4a34cf4175a799094e9902ba7", "sha256_hash": "f8232281d4fc2517d326de4ae3dc4623bb2433033b605dff82f31005347ade64", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000310-addr_0x0000000004ca0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000310-addr_0x0000000004ca0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_158", "md5_hash": "8d631c56b28cf0abb0948d990d7acae3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "07071c3a0581c7c4a34cf4175a799094e9902ba7", "sha256_hash": "f8232281d4fc2517d326de4ae3dc4623bb2433033b605dff82f31005347ade64", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000311-addr_0x0000000004cb0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000311-addr_0x0000000004cb0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_159", "md5_hash": "147f7c610f78d49819c778b78c1b2936", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "10e68ea11980385ce5269dd199bbb399fd332873", "sha256_hash": "92899f13be5469013ad8fff0687ca25e662835e11a0517d855cedec1b97f34b1", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000315-addr_0x0000000004e00000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000315-addr_0x0000000004e00000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_160", "md5_hash": "ff530e93678f2c7c5a895706cc4ea977", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ffe1843f24806afd4e039e6c6262b7f9d60bb600", "sha256_hash": "b9abcdb874516890b15eaff66578589eb0d7bfbdc24db2409157319fa41a1d72", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000316-addr_0x0000000004e10000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000316-addr_0x0000000004e10000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_161", "md5_hash": "6925f388a787ee1bc030b7fe2fe1434d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ce9adf65849a230c4f1383ce29f97d9550fc6a1b", "sha256_hash": "866d216bb161bf50603cdb8a86657c1de936dfd00d88ad7c7b76a2f05f1a4f4e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000317-addr_0x0000000004e20000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000317-addr_0x0000000004e20000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_162", "md5_hash": "239b821250038722c8872ec699b4cf01", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dfeac982449e42f9e440a93bd561ad7c9aa19055", "sha256_hash": "97edb16e2b9d61af3b12c4fd954cc07af35c92158dd622462eee1efcbd116e9b", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000319-addr_0x0000000004ed0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000319-addr_0x0000000004ed0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_163", "md5_hash": "3961e8316b44780c1fad06d2146abacc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "712a18070cb78b7343e18a663115c7117a89eaac", "sha256_hash": "b1489d14be11f34da873a008a8ca9dcfc06bcf8cae94980ab079178a182d6cf8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000322-addr_0x0000000004f00000-size_0x0000000000001000-perm_rwx.bin", "filename": "process_00000001-region_00000322-addr_0x0000000004f00000-size_0x0000000000001000-perm_rwx.bin", "id": "proc_dump_164", "md5_hash": "487c29d93d2506bd365188a66f591b96", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1b8a96e9e872ec4fda8a2706e8ceacb115a28334", "sha256_hash": "fa58ed6d2514e763288cb19d596ea8a95a573b8e6f2dc3fd34f411b09b7abf0e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000323-addr_0x0000000004f10000-size_0x0000000000008000-perm_rw.bin", "filename": "process_00000001-region_00000323-addr_0x0000000004f10000-size_0x0000000000008000-perm_rw.bin", "id": "proc_dump_165", "md5_hash": "f1118e47446f9a81744c902b5b59593e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "57dcd2ef3b0164f87e3c7804c6decb2636ba4812", "sha256_hash": "e3aea7536b60a874319f4c388d2c4634925a761d096c7e2327dc40bc68033d81", "size": 32768, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000328-addr_0x0000000004f60000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000328-addr_0x0000000004f60000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_166", "md5_hash": "85fdcf21bffb6323eac17a4ddd038c00", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1743980ca789ebfa74483d2aaae39ee3dba9b432", "sha256_hash": "da88182c2cba5b03cdf0b62e9be6e987468ac302f8fb101091d0436494dda177", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000330-addr_0x0000000004fb0000-size_0x0000000000002000-perm_rwx.bin", "filename": "process_00000001-region_00000330-addr_0x0000000004fb0000-size_0x0000000000002000-perm_rwx.bin", "id": "proc_dump_167", "md5_hash": "6e50c500793241013bb0420c2b5b64fe", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c2a92f8c47258abc04be24b3e3cb1355384bccc6", "sha256_hash": "81689adf6efb3846ea607555ebce055eb1c27f9ab4d8e1c81d871f6a12d0864e", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000331-addr_0x0000000004fc0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000331-addr_0x0000000004fc0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_168", "md5_hash": "7a5910c0402a2242546a09e366ed6e66", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6fcbf19853444bd25dfc16f558bdc9cbb6baf441", "sha256_hash": "236427a4e274908ea007147c99ef5d153e5753c3848815f6b5e3971e0efa692a", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000332-addr_0x00000000050c0000-size_0x0000000000200000-perm_rw.bin", "filename": "process_00000001-region_00000332-addr_0x00000000050c0000-size_0x0000000000200000-perm_rw.bin", "id": "proc_dump_169", "md5_hash": "cbd29585c9d0950750b44be110a572f8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7fc45d5cfd776d35f0a85ba159e8c488820dba26", "sha256_hash": "f4c95c2e8f4360796e06d23d0111d220788c7bb15a709a68d7c73006f19d6ca6", "size": 2097152, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000333-addr_0x00000000052c0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000333-addr_0x00000000052c0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_170", "md5_hash": "13be440e90f2381f601a88358bccefd2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9d0680e6acfbab71923b23056be880edb1aa36b3", "sha256_hash": "01100a06bfb8668abf831e2858ad5b834bb0532f926cc48331f1fae04466e7da", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000334-addr_0x00000000052d0000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000001-region_00000334-addr_0x00000000052d0000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_171", "md5_hash": "ea0c1c56c520f57ee48ce34545fb658e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6537d573577ebc527be151f9506551703f1fb8d0", "sha256_hash": "1595fe42a787780cde745dd2bfadd98fa631ce81c8dd84fab7b206b8c84cd0a7", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000335-addr_0x00000000052e0000-size_0x0000000000009000-perm_rw.bin", "filename": "process_00000001-region_00000335-addr_0x00000000052e0000-size_0x0000000000009000-perm_rw.bin", "id": "proc_dump_172", "md5_hash": "811b108c368a4d72e5f5576a543658cc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fdae1358f4807bd395d31294c22902239eba42f8", "sha256_hash": "21964c1f6a1b644a3f870f05fa5cd1a873f3af748095c86a683fbff537aa6e5b", "size": 36864, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000336-addr_0x00000000052f0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000336-addr_0x00000000052f0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_173", "md5_hash": "feaab3a99a9f64bcc135fa49798efb14", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cf19dd186a87f285324c011b5743fed1fbdaf56d", "sha256_hash": "4fc01ac7f6434f785b8d734574abd3fb44054beadde400c8b61126d46945f449", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000337-addr_0x0000000005330000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000337-addr_0x0000000005330000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_174", "md5_hash": "e77edbe026d587740b0789aaad35f5be", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dd5c981ae47bdd77d4dc34445249141945e33798", "sha256_hash": "b774b6e14ca52fb82fde5e87c52a235b3e84db763632246947fc64553a07d869", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000338-addr_0x0000000005340000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000338-addr_0x0000000005340000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_175", "md5_hash": "9a130dd21cce1fcfba7f4f05f8b2dac9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "60e01a8f8f39ca60f83843e07dca4a109eaeff43", "sha256_hash": "50ddce30e6d4e6ff9c127002dd5129a4d1a50dec7a35bc3fba02b29f491fe4d0", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000339-addr_0x0000000005350000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000339-addr_0x0000000005350000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_176", "md5_hash": "c0bda0cbf156fe4ed50d43e6ee8fce33", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "912ba9ec536c818496811ab61b76a3fde060b72e", "sha256_hash": "c166076bccef3eb2f379211d496b9d1dda83a56a7bab1fd7ca75e1e2d4dc277e", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000340-addr_0x0000000005390000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000340-addr_0x0000000005390000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_177", "md5_hash": "25c676aeea81ea2beb57af5070b40a26", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "24a426ac37aacfbf75646aea3bffba1d38117b49", "sha256_hash": "316ff0c3dbc24b481a7ecffcce77797a2b2c66eb72d8983dee301fa17a4cc8d1", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000341-addr_0x00000000053d0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000341-addr_0x00000000053d0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_178", "md5_hash": "3ac78b669c900f2814a7c3721657379c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "90896ce0b75496539513edb80b76442d526694ce", "sha256_hash": "f21732b929038485b21664610a5f905b4e3a90fd3136d5889eb3ea6235c9bc4b", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000342-addr_0x0000000005430000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000342-addr_0x0000000005430000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_179", "md5_hash": "3c8965e681a98d96fe34c4f7485a7b89", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b63ce2e1b47e28e619acab704f72e3221865b420", "sha256_hash": "12c23d86cc0c1cb59e63ec6d9d42240a7e7ecf5b052ae1cf2473ebacb76303ea", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000343-addr_0x00000000054b0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000343-addr_0x00000000054b0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_180", "md5_hash": "94ff0b0a84b1bc8813e3d1f3ec0a2e44", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "57ab6d102fc2c3d3c035f5df41227900741d0df6", "sha256_hash": "983833d1f80ee7aa380426a7e86b6fad4bc1daccefb7bd57693d14116c0cf951", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000344-addr_0x00000000055d0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000344-addr_0x00000000055d0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_181", "md5_hash": "beaa0fc59b68e75e8ab1551465b12457", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f943cc54da608eeddf38b8161638b35d841f5ad2", "sha256_hash": "901b6c8e4638c751955b2d7d5248fd5007c75332c045c1eb11faf47c85fd4dbe", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000345-addr_0x00000000056d0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000345-addr_0x00000000056d0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_182", "md5_hash": "9a7d5f73ee9c39ffd04ac46edb2153a0", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4b7d59d42094f6a9493c295c767f8c1428b0b403", "sha256_hash": "dd08218e2ec605775250608576166b8e2488195feb1f73edd522191dfaef35c2", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000346-addr_0x0000000005710000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000346-addr_0x0000000005710000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_183", "md5_hash": "8ed592439fde3d502cbf6fe6af4b28a8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d7efac07f176a35e413dfb3724f372e98760ff43", "sha256_hash": "39a2032a839b1641ed461d68b265def6bd29a48ebef978a9c0f116755af70438", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000347-addr_0x0000000005830000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000347-addr_0x0000000005830000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_184", "md5_hash": "9a8cfb0c46c0bd0c7d7fce1b6d988f89", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6db73c922f0401428614920f49fea773e5679c31", "sha256_hash": "d34ec18e8061d5629965bd00bc0663bc3d9464324916ec67dd223406fff23c0c", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000348-addr_0x00000000058a0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000348-addr_0x00000000058a0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_185", "md5_hash": "1af287f722255268756ac33385c7cc38", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1678a34d1f409659d07f71fff4a2c47084c2a658", "sha256_hash": "669e1d23d96d473f1f100dc40bba1aa376d12dfa7f3189465e4988e7e2cd0a01", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000349-addr_0x00000000058f0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000349-addr_0x00000000058f0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_186", "md5_hash": "f0d54e41a8857f2ac1dd538443c699a1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "42fc1e23a1cb58d2bd7c5c4e770f77f8e82f1b84", "sha256_hash": "17466d90315d872860be89b6f723406e9e3bff3c71bb67f1e651488e7c2f5cf4", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000350-addr_0x0000000005a10000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000350-addr_0x0000000005a10000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_187", "md5_hash": "e42ed788dad8b1ca2385f4bc825824a2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e37ef697ee8ed31601b1e5847d5e736dd28e98c3", "sha256_hash": "d4543a14c68b0c865a5856da2008df294f141f7d705354c2e21df8facced216e", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000351-addr_0x0000000005b20000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000351-addr_0x0000000005b20000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_188", "md5_hash": "999b522bbcfca059e6080162a117f5e3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d980556e720e47e26f6bb7532f2334443cddfc82", "sha256_hash": "ceb628f9a4bf51961b04a23f56dbf39832394dae9c9e61ba95fe80ef52b88059", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000352-addr_0x0000000005c20000-size_0x0000000000200000-perm_rw.bin", "filename": "process_00000001-region_00000352-addr_0x0000000005c20000-size_0x0000000000200000-perm_rw.bin", "id": "proc_dump_189", "md5_hash": "f5663c6df542395bd71113f47ab1cd3c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0b7f20b138f58023814f519d4650ccff1565a372", "sha256_hash": "2eda1e54494fb8f83dcacc4431bf00874e17ff332912b6a3bb2526e0f7da4213", "size": 2097152, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000353-addr_0x0000000005f80000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000353-addr_0x0000000005f80000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_190", "md5_hash": "42e440d2e5d91a36aa6aafc79f69f1e7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fa77db753564efb62d7cfd20a40248bae82f0442", "sha256_hash": "81f4130dfbbcb7d8e4e12ec8522213f5f2f52039c0369e8b2b88d507e4a9b2cc", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000354-addr_0x0000000006160000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000354-addr_0x0000000006160000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_191", "md5_hash": "e0b9b7734aae0d4f5cd9a7b9db8207e7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b7d131bf5e06ce6cf7f8f8ef0a8a29a732bff4da", "sha256_hash": "4d8b2fa824e14eaa68e32e196dc1f49ac01bfbae3093b32b0714c55aabe95552", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000355-addr_0x0000000006320000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000355-addr_0x0000000006320000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_192", "md5_hash": "f0a550dd31bf950ba58d8f79a65b8722", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "77ba250973751246ce780569dd9e71d30524afd6", "sha256_hash": "f5ea7affb51f0b65f45fb80c9484ffbfbdb30e929d84815eacc53616cbed371b", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000356-addr_0x0000000007860000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000356-addr_0x0000000007860000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_193", "md5_hash": "51c87e3de3cb5fb4f77642c228696635", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b77566a6395141a2c23f7ce84dd0dd2b52ddcb4b", "sha256_hash": "e1e6cf1b53caca74ed7f870c81c767a70f583ddf31996f9990bfccfa5b8ae5f2", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000357-addr_0x00000000079e0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000357-addr_0x00000000079e0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_194", "md5_hash": "bc2aa8da842c34af7637f2bf6274791d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "552f545b58996303b3e3016b07acfb223f4acb59", "sha256_hash": "1f05df838fecbaae639b020c9493793e69e7643448fcb4008dec5d7ddd3b8116", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000358-addr_0x0000000007c10000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000358-addr_0x0000000007c10000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_195", "md5_hash": "5542ff0b4bbf80508679ca7f4d505ea0", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6481e6c02b16526caf176b83c50f0db3bac6b9a6", "sha256_hash": "06d6d543a944e3028c60c2eeef564b18141d80186ad7e03cf8caac06d0c0c848", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000461-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "filename": "process_00000001-region_00000461-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "id": "proc_dump_196", "md5_hash": "6eeea0bcbc21bd1c0d7f0d6ae3488f7b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fad191d56abe255a03a7b4b3b641fcfa8a4f81fe", "sha256_hash": "938a68694e4495227ebc925be61a20adb5c6c82d7dd57cc67a2717e2f9f2bf70", "size": 1024000, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000462-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "filename": "process_00000001-region_00000462-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "id": "proc_dump_197", "md5_hash": "caf76e9dd8864dfb7d729847f3595e80", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "71745f0f20bf18b3813fbb1a30eed8d41dc1d51d", "sha256_hash": "f113bc4b90aa0447b7992c2783d7c3b16d63f0e65e2c54c6e93ba833e8e0c667", "size": 1175552, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000465-addr_0x000000007ef7a000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000465-addr_0x000000007ef7a000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_198", "md5_hash": "c135252e05715d772e5ea5e0d52647b3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d67dc5639ee141dd4ef5c0f36204d6c7d999b105", "sha256_hash": "a47ad3f6c4cab5f617a52a87d8a59bfe97cee205a6f448dfd96afd88784ef1a1", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000466-addr_0x000000007ef7d000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000466-addr_0x000000007ef7d000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_199", "md5_hash": "f71bf8c253cb501444e34e0736488e17", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "344b0bd766d1367fa41662f35abfd38e55b22662", "sha256_hash": "b1d37866706a6909a946f700ec27da4beaff3563e2dd4b6a89a75250bf430eda", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000467-addr_0x000000007ef80000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000467-addr_0x000000007ef80000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_200", "md5_hash": "7857a4b7dc6d264fe6b54bbca281a5df", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3122823ceb14bc0cdc25799958249b84b7333c22", "sha256_hash": "1ca912aae11b26b62cdb77ecedc332fcbb19d3308cecbb7fecd44a7ab010f9ca", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000468-addr_0x000000007ef83000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000468-addr_0x000000007ef83000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_201", "md5_hash": "6a453d9116d80ed8c94300447e80ac36", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b207361280dbd1faa1019561af5dbd69e2b9c39c", "sha256_hash": "d80db2aa3a6510e2118aec6f2aafcc5f328f4799fca0e1225ae0c7307bf739fb", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000469-addr_0x000000007ef86000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000469-addr_0x000000007ef86000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_202", "md5_hash": "e3fed4e1e26614dc7c8e292275c88272", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "258599c8c15fe3072d1edd6e71bf306edca7619d", "sha256_hash": "2bd5ee9b2637590981894743abe31c0064c1a9274308404c871ef77c359fe8d5", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000470-addr_0x000000007ef89000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000470-addr_0x000000007ef89000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_203", "md5_hash": "17edae2c91557e8a08d9d6094390e29a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ca9d6abc1c64a357b0188382b0af21cf48adc0ca", "sha256_hash": "0dfe7815f1c4c099ea8fe1f8c4bcfd5cf33c79604055087860148c27f93d1a05", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000471-addr_0x000000007ef8c000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000471-addr_0x000000007ef8c000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_204", "md5_hash": "2b707a79c3b6f862722f336ff45d5a3a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "50ad91bcdaea06344a6cb21faddcea94a780b72e", "sha256_hash": "504477c23a5b26ff8e960214611f5dfde915d8ccf3c8bbc4574cf415b4ea2c96", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000472-addr_0x000000007ef8f000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000472-addr_0x000000007ef8f000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_205", "md5_hash": "947529edd036b7a5a48acc3e78b489c0", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a1cabc5bdbf42555b7ec83916433603cc3ba1b59", "sha256_hash": "5ef0faef0b57eae9c55bd550850f9cb1cd59ef9ac9efc0d58e5d5bf9858e873d", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000473-addr_0x000000007ef92000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000473-addr_0x000000007ef92000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_206", "md5_hash": "c6ac1fa8e4c307503f39b753972520ca", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6a1d7184240abcb5090b030e2e6ba54797a63976", "sha256_hash": "2208e68a95f66c22bb12eb8be272b2b551d80166a6c05f9a7b2a85c731fb0f31", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000474-addr_0x000000007ef95000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000474-addr_0x000000007ef95000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_207", "md5_hash": "95cffdc7c03f7926c298ec8a5fc5a626", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9a1c29b10a7f3471eea25e342620e526dd530319", "sha256_hash": "5feb0f0013fc6be3d683e117b9e84bfded8e8a98ab1d11667a13c75c79fcb09c", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000475-addr_0x000000007ef98000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000475-addr_0x000000007ef98000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_208", "md5_hash": "0e5e86396a34dfcd1415597e3b758301", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "50a82c3f1eaef6d3a501fd49d77023484a0da5ee", "sha256_hash": "5153a38e85e206e3bd2d0dc0ae4d0dd4f631352c4500983512741924a93f572c", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000476-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000476-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_209", "md5_hash": "2f6503a65f94a5a6435b5f6f281c8220", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "645391bfa224e144323c455f4b00c4801eaa38a4", "sha256_hash": "a2291b9d7503c46d00ab7d7d53fa987cef3285da2bb2a95d68498edb97e84bbd", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000477-addr_0x000000007ef9e000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000477-addr_0x000000007ef9e000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_210", "md5_hash": "cb13b24a307702891d6eca3d6211ee55", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2ad886232ca68f03bff56a35c31ababc2a8d60f1", "sha256_hash": "cdb958f272456b55c7d5ed449224c91b6efa40e02d347dc758041823b208149c", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000478-addr_0x000000007efa1000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000478-addr_0x000000007efa1000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_211", "md5_hash": "e425ebbed1f1fc7ea0f7c99b4ef6aef1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4781257a229208e113691c229cdc36d9c59e7a06", "sha256_hash": "8d034d76b44dc3e8053116f38ebdc56011b3beb344fcc793a5d845039906de63", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000479-addr_0x000000007efa4000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000479-addr_0x000000007efa4000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_212", "md5_hash": "a7d935b0af874d5c19b1fe2a4999d395", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "02b574d108701ec8a48e250f33eb3af228e67801", "sha256_hash": "76f7f07987f17b0349df7a43cbb497a178be3395246b0e1667b3c2864649c762", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000480-addr_0x000000007efa7000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000480-addr_0x000000007efa7000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_213", "md5_hash": "c72e09bcb86bcab748c56ab3378748b5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b34c8b8e5a145a00d436e27c4f100a832d4407e0", "sha256_hash": "2af5a531d1a1ee69b02e7338e1c3bc102e09d8c2af6b962a24fd429d282cff8d", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000481-addr_0x000000007efaa000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000481-addr_0x000000007efaa000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_214", "md5_hash": "8e8598e4b010c45ebb13e5436c0b79d5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "872b14bca7f15f4e8bb814b58909952367812b86", "sha256_hash": "698af020471af2644b51907c9c748e30937d7d43a10897a74e3b4a7cb0e92483", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000482-addr_0x000000007efad000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000482-addr_0x000000007efad000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_215", "md5_hash": "88b5296a885a9f955ccc86ff4d63ecbc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "042cdca46367c18b4e621a799bb9efdc9bfa1419", "sha256_hash": "a4b1c4829d51dc7e370451f08e0a9171c3d4029cdf2f6d887bc1f7dae5a66621", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000484-addr_0x000000007efd5000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000484-addr_0x000000007efd5000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_216", "md5_hash": "73fbdc24703e89d917662a6b1d74a96a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ad34554f42cb428252ab04f1837e0fa53c0c4818", "sha256_hash": "c1095b34b783b885057f2f556dfcda28cd45566704f63075bea1fdb9b6fe8f4e", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000485-addr_0x000000007efd8000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000485-addr_0x000000007efd8000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_217", "md5_hash": "e7ad10e63762a377f60b18df5e6e3ecf", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "91f7e8ae2a3ad088d5225ac8951b6119d93630f6", "sha256_hash": "5dae133b61a44cd3b4aae87a88e4a553b1331992e564eb5618ef37efc9682c8a", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000486-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000486-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_218", "md5_hash": "dd7a231f47f5226a276e37da6dbd32be", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0f87c5721ad92a5a57914c26040081e6e99f1095", "sha256_hash": "43eb4cba9a9af2e78e4b54058521dc3a662df16664e54f082fb7ab28d3ef968a", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000487-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000487-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_219", "md5_hash": "9cfdde9e68a8f4909028558b2dc213c0", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "54b3f1dea53ddcafab20c1acaa8d6dfa2bd7c929", "sha256_hash": "bb4ca48742aebc319d7a553d2bd02c5f8585be408f39197226adf8bc6bfc7647", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000488-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000488-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_220", "md5_hash": "a82f05cc191dbffa8949b1cadfffd8bf", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1cffbbc17f89f18e97129f5d29213d6aac78efb3", "sha256_hash": "b6b932c8844cd9363d1247db4adbc8097e714f9da5692207b754a74534f21059", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000491-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "filename": "process_00000001-region_00000491-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "id": "proc_dump_221", "md5_hash": "669ff601dbf0473cc1cd2e5289cf90d1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f6b2aa4bbaf412ec7170f9860cb8f94d372c0a8f", "sha256_hash": "0bf754b16b09af9ee082a6af3bb86ca572bcaf357b3f4742e83f1851084b2f4b", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000502-addr_0x0000000005f10000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000502-addr_0x0000000005f10000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_222", "md5_hash": "d6a143e77459d8511b2bb7aa5f0b5ec9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "69d25bedbd8e700f261650de5ba48d7f25b417ee", "sha256_hash": "8ae6b806ae627de04621a2f183ffde98caccc0d779e74238372ff30c5fb476f2", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000503-addr_0x0000000006420000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000503-addr_0x0000000006420000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_223", "md5_hash": "9e4df4cadbf2f071a3bd7e6d2fdc0462", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3526704188e93751a4de3a8bd04ee19922594e5e", "sha256_hash": "1107b2eebb345d41d06e8d78300011effdd3cee5775fe266aa271bf9d98c90d4", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000504-addr_0x0000000006560000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000504-addr_0x0000000006560000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_224", "md5_hash": "67a56c16700093c5bcc6a8e22fa055ad", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "aa422cdddea8d3fac53a2c471165892540dbba43", "sha256_hash": "44fe604ee1a4afcd40305c980dcaee64ddef3c92b26bdbd0794fb74adea0965d", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000507-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000507-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_225", "md5_hash": "fd829c7625b1eeb74e4ef88ecf2ab205", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "faae0f707db030934ffac1c7efc68d94eee3a016", "sha256_hash": "9d06ea6f9a18535e2af932a40322b01cd2d2df1a8b9288365cb759e8c637c9b9", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000508-addr_0x0000000003af0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000508-addr_0x0000000003af0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_226", "md5_hash": "e2f9933322a591f1de0c3912306b60fd", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7ddc6d36538921b3d2d38c4308143f03b9615c60", "sha256_hash": "1ef39ddb1ec9e8e7396d1937fb3d1b2e0589f07d69802d5dd490d7096706da20", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000509-addr_0x0000000004020000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000509-addr_0x0000000004020000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_227", "md5_hash": "d96640c0244ac4cac550432a54d89a38", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ce94b9ce32e2102c1d3281e6c58136ef25a3cbce", "sha256_hash": "743a3958e461e3f91a001af21630a7a346d957e956fccdf74df7fb8fd1ac3412", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000510-addr_0x0000000004030000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000001-region_00000510-addr_0x0000000004030000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_228", "md5_hash": "d7a5f8650e4b402b17500da2c198ef1d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5c84205cd4ff080f20e1fbfed3a797e8e669131a", "sha256_hash": "53a8f6babaaa48bbb8323390ee6c040fd35d79cbcd0b4d438f98f434bc1b979e", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000517-addr_0x0000000004020000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000517-addr_0x0000000004020000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_229", "md5_hash": "b94a56a0dafa49491ab3c11393c7db9b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "987047129ced85bbdbb2035742ec26fe2da3164e", "sha256_hash": "a0527034b8ed92d8ec161e2c6488028eaec125602a3bed1b727876c3020dc6a1", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000518-addr_0x0000000004080000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000518-addr_0x0000000004080000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_230", "md5_hash": "35edf787b0a19f1c2e466da5a2bb5dbb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1207e823fe324361d95ca47510a1f51092bdbd8c", "sha256_hash": "2bb14be3e600f0e11417313ae2e5cca68c2ed877ef397e42941398fc6e9a5a12", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000519-addr_0x00000000042a0000-size_0x0000000000020000-perm_rw.bin", "filename": "process_00000001-region_00000519-addr_0x00000000042a0000-size_0x0000000000020000-perm_rw.bin", "id": "proc_dump_231", "md5_hash": "09d9bed12a7941d95451058f4a46745b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "264f36dd96a32c50392e79567d85c86a3855ab5f", "sha256_hash": "a33be0f7b220a81a0d4a8ff960e9bee495a473e2c51a75467f16b817161eee25", "size": 131072, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000520-addr_0x00000000042c0000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000520-addr_0x00000000042c0000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_232", "md5_hash": "842826c6c2fee243a42fdcd6c63915df", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7c85e331689c4246304a6f75b5821369893013d8", "sha256_hash": "5ed4914d52d60d1e51102b22baf5567b1574f02b5765b64e781fffb80ff694f2", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000521-addr_0x00000000042e0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000521-addr_0x00000000042e0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_233", "md5_hash": "adacad18fc026e7a7e66b94ff27e28f6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "df9d3bf3cb85ab557b16749315985342cbcbe08e", "sha256_hash": "f9193528be3cb91d2efaa76a92dbf48d88818547f9fecd12a4e97e1e8aa8596f", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000522-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000522-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_234", "md5_hash": "9d76d745ebd9d045b315160d8342f2b1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4ae7759e7f8b15900965db917267052aaf83173b", "sha256_hash": "1cc246db8228199903afcaa6f7388e455fbeac5ec93668cf82ce7906d2d504e7", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000523-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000523-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_235", "md5_hash": "75d8e5eed2b54d72bafa2a065ff6b6b2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fa74a3084fe6f2cb26a21ebbb5c84b43764f8cc6", "sha256_hash": "a526e48872adb8dab68b5190b50157395af1898aaf5dd9911203e12a3b8404f8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000524-addr_0x0000000004b50000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000524-addr_0x0000000004b50000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_236", "md5_hash": "0b9e9f6cc6da055a683ce757a7e728db", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0a5d84b478ea0e058a685d32fd7da526808b945a", "sha256_hash": "f7a37e01014bb53864fc4885177611c4047ba89833f3cb1ba80c751e49d6e6c7", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000525-addr_0x0000000004b60000-size_0x0000000000020000-perm_rw.bin", "filename": "process_00000001-region_00000525-addr_0x0000000004b60000-size_0x0000000000020000-perm_rw.bin", "id": "proc_dump_237", "md5_hash": "d5558ed941ee0e3d0b6d169768d7efc6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4597f856122269aa21b07cb47892d29d30ad86e6", "sha256_hash": "8b46801b3aeaa707889b0ff9e44def88326832ac87fe58b22caa3a54246e1341", "size": 131072, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000526-addr_0x0000000004b80000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000526-addr_0x0000000004b80000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_238", "md5_hash": "601348ca35fc8b57232c52affcd9800b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a00055692082e6bf758b1b130f4f9695e4a8c69f", "sha256_hash": "318e2e41ebd4c9bf3caa6e8e4f0cb5b8e5d64a337463b569ee985bb21768de91", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000529-addr_0x0000000004bb0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000529-addr_0x0000000004bb0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_239", "md5_hash": "d83206a428bca36d3b21ec38536a80bc", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "eccde1c731b7110f6f503a80fdf9a78ca04e6baf", "sha256_hash": "f381c0b2722a5ae1348bc0d39ca5836422afaf868ab3c8c59c18a2cef06288cc", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000530-addr_0x0000000004bc0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000530-addr_0x0000000004bc0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_240", "md5_hash": "6f347d82e459e8ca3eb18f425c123e7b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cd447232859811424df641f7da380dd98e333bab", "sha256_hash": "bf38f326955c1613b8f1c05b394c7128f38f912da77df620501eec3fd13e02f9", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000532-addr_0x0000000004e00000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000532-addr_0x0000000004e00000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_241", "md5_hash": "fd96b2077151474b7f80070ccaf73200", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "be15c718b878c6b02732c522fee90d660f0f6d48", "sha256_hash": "69da6ebbfabf1cec1ea48f8bcf5aacb5e334f6c4d06363d1d39a7032816c91f2", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000534-addr_0x0000000004e20000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000534-addr_0x0000000004e20000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_242", "md5_hash": "0896193a6b83b9ce03aa4d4c5155f9ad", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "57796b71a3e0f61428e9950bf76cea7f68a6368d", "sha256_hash": "a0fecffc5040147cb0d535c61722c9446904dd85f3eeccb38b09630da73f22de", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000536-addr_0x0000000004e40000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000536-addr_0x0000000004e40000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_243", "md5_hash": "05ff0adb35542b4d5798a9c83cc0f7ce", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9c3fe98a5c6cf97e1d50c426f479ee3579c08a6d", "sha256_hash": "092daa4bb5d8560c507a3607d941b91153abd758454a8ac9ec64203c8efc193b", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000537-addr_0x0000000004e50000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000001-region_00000537-addr_0x0000000004e50000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_244", "md5_hash": "a08c19dab48c44c6b0221c16e73ad080", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ea0763c68197d87f25159ff45c9d68e0e0133e78", "sha256_hash": "846cf0fcbb8e6417f397f1e9ff472b17e5b6700e0d87eb20619df3af249dcbc6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000538-addr_0x0000000004f10000-size_0x0000000000010000-perm_.bin", "filename": "process_00000001-region_00000538-addr_0x0000000004f10000-size_0x0000000000010000-perm_.bin", "id": "proc_dump_245", "md5_hash": "51b0c2b1116c2ab8ab3cd93301822ed7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "835f9ce7937ae9bcee201ded1c08b1830ddd5bc4", "sha256_hash": "13f89d811ecea715d5a9b8ab94258b80671e131cbbbc216eaf1d591200a7a377", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000539-addr_0x0000000004f50000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000539-addr_0x0000000004f50000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_246", "md5_hash": "da167b9f31196b35267570cb02cd45d9", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b856b6948f1268057f3753fc9ca951e4cf3755e1", "sha256_hash": "70d6074f0b04f49877d0657f66032ae4f8cb5ea4e8130ef30eab22257ace289f", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000541-addr_0x0000000005ad0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000541-addr_0x0000000005ad0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_247", "md5_hash": "880fe8add867904e0b5da0c147c414fb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a6cc14ca5ed020a4134b5901e57fdd94db0056c3", "sha256_hash": "7f4f6aa01a3ec49d81e3d3a4850540230296b6a6cd40c8c041b0f371c2a74668", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000542-addr_0x0000000005cf0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000542-addr_0x0000000005cf0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_248", "md5_hash": "790f1b6b7f65f181021af7b6c6615de2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "240a9f9cf5599b789fd80158eab723ebdad89e79", "sha256_hash": "3702eb79f0249aa16d572f615a85ddccac980bb7abaf4704dbc53c03d64bdc40", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000544-addr_0x0000000005f00000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000544-addr_0x0000000005f00000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_249", "md5_hash": "7cc37d4f9c329175b96272f1b89bf678", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0ce23afcad575acc17339cfbf09395a9877b7f95", "sha256_hash": "072f540107aa108abe5bca709db4197da3d5a69e741fe2e21e67a3bb54cd6868", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000545-addr_0x00000000060a0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000545-addr_0x00000000060a0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_250", "md5_hash": "719fe6ec63574f0a36fee3c26eb27163", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dd97d35bd574f2077b1b4e976a3ff960848e7f9e", "sha256_hash": "7bb07d6bcfe7f7c4a97336dd17bbdfff777f98bd44af35abd401a60826aac642", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000547-addr_0x0000000006e30000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000547-addr_0x0000000006e30000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_251", "md5_hash": "f7c3187c1bfe98c06987b3f322977c75", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ae6885280b1a5825103390d14c641b12b3135797", "sha256_hash": "967aaf7398f473f0e67639bc77711d741475a1cfdfb33dd314a0b03c243de461", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000548-addr_0x0000000006fc0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000548-addr_0x0000000006fc0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_252", "md5_hash": "59a32fd5409e87da994625c8bd2d2a06", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "595f6f5a1b4055fb45388a256e9ff320c5498f55", "sha256_hash": "732c2e442f5a0b197e2540c900cce1859cd23fa9a5e93cce975d0d0d530f8794", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000549-addr_0x0000000007150000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000549-addr_0x0000000007150000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_253", "md5_hash": "eb800575c568fec6f69ae7004d2e48c5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b655c5c82f5f51380639bf474473ce7436297d39", "sha256_hash": "c3e8de2b273ce871f1e4b7b8e9d8a996fc76c2aed616af5fadfa5aff659a8504", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000551-addr_0x000000007ef74000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000551-addr_0x000000007ef74000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_254", "md5_hash": "67427c7a63b4b4a551c61d90577e1744", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "903e8eaa3259453512b15e933d36f4d6d04fe2ec", "sha256_hash": "696fd7e0646595bb848ce35aa9fb7e31bf25185c937212979045e94541fbd2c9", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000552-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000552-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_255", "md5_hash": "96532d090786398bad0f21e417760dd7", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7d6ea49c036219d356dbbbef1a9b33e4c6b8beb3", "sha256_hash": "51b082e620da8e09a1ce6be5cc8fe0bbf264bfa4bb99c5bd4083b2577d35ef4c", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000553-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000553-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_256", "md5_hash": "e5f7c29e786dfabf338e5fa465a4b3f2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "beb70226e4be6ecd1edc0b81428ea486c8d5f4cd", "sha256_hash": "6d2492b553b9639aea92becbdebea40e725e14f8d9c4ab57109dba27b1d5f403", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000554-addr_0x00000000052d0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000554-addr_0x00000000052d0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_257", "md5_hash": "ff30a799a37b910ca645e04cea1abb03", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "882e7ac537bd369d5f35987cdc944b61b6912629", "sha256_hash": "4590f002c0361e64b009f32e5af6e073f0f65604735292c8f4e53cddbf65484c", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000555-addr_0x00000000052e0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000555-addr_0x00000000052e0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_258", "md5_hash": "7a76bff21f4421b79bcbe43ef0af02e6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "464d00e8e420f9c966d354a812c813dec6d881b6", "sha256_hash": "b6a3e05a6221ab6d0002f2e1d2ffa3a5dc45b116aa707c6dce6f4fe12d460da9", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000556-addr_0x0000000005330000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000556-addr_0x0000000005330000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_259", "md5_hash": "11a71d03bf0ab16eec2cad61b444714d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f29be2d375c763e77072f90ff44d4d6828bc15e8", "sha256_hash": "f354d192c2b8db90a06c7a23f6a3de86bc073aa52ebdf59f66921b3becc330be", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000557-addr_0x0000000005340000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000557-addr_0x0000000005340000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_260", "md5_hash": "dfd410f913a372670b2333218a238913", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d1ba89c1ec12bfbb35a345a4c259a44d23b946db", "sha256_hash": "f4727f4de34b7bac84ffd1eb71cc921a0d5731fc65cbd1c1846cc97575b9bd6c", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000558-addr_0x0000000005410000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000558-addr_0x0000000005410000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_261", "md5_hash": "52816176ec162c00d689c28d5b3d322b", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fc786f3d6e1a7ee11b1a33efccb8c8840851915f", "sha256_hash": "eea1554b07e0f01f0512185ee8059b7137b9a7bd96b3d55dc9c37b361f8b0af4", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000559-addr_0x0000000005480000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000559-addr_0x0000000005480000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_262", "md5_hash": "a60b57acbd0b6b35aa30cace425d6deb", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "84eba8e05144f614029bae737c3798536ac108b9", "sha256_hash": "1a7412903cd9fd430c2b815db73b4df763ad61f64c48ce9dcba77b2ea8e5e0d8", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000560-addr_0x0000000005490000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000560-addr_0x0000000005490000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_263", "md5_hash": "ac12fa30e41e8a4535a88720483217b3", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ba64145be213313953d13be11b033622189321d8", "sha256_hash": "94307afaea5a84214d42999bb1346ba76d82eb8a4f51dcb9121feaa243f3b457", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000561-addr_0x00000000054a0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000561-addr_0x00000000054a0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_264", "md5_hash": "988d0b728a60e5b4b424236c6b02c2a5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c3df1aa02a5d7a833ffbda3bab9f428fb5417eb6", "sha256_hash": "f84128613b9c3476768bceb7ecc6152ac5f21068db74da0b9dabd6ac15dc9a0d", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000562-addr_0x00000000055b0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000562-addr_0x00000000055b0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_265", "md5_hash": "c6e31bc642bacea199570d9b9ea72050", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c917c0ac2ab410a1ba8093036b641d7692b0aff3", "sha256_hash": "647c979762143bbe86704ff000e21969ea4af6694983544ed234c987410320c3", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000563-addr_0x00000000055c0000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000563-addr_0x00000000055c0000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_266", "md5_hash": "39c6c336265412c7a9df351f0129d098", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "045f9fc50a728f1b6214be2edb36c8ab6108b8e8", "sha256_hash": "0bebce93edb3b8ef229d0add4ff4c5a00d02168558177af0002428fa11f4746a", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000564-addr_0x0000000005810000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000564-addr_0x0000000005810000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_267", "md5_hash": "d4a7624c5801c591d482e94c44d4ef7c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5ca7efbde7a68b0b4c569f5ffa5c61d5ca317f21", "sha256_hash": "93552983bc7365fa31e51bab0ce64c73d4edbcb980b2c63ef65426b0471ecc95", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000565-addr_0x0000000005820000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000565-addr_0x0000000005820000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_268", "md5_hash": "a13d547146e46b9b22c441e742f7a721", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "51687aea8579b097cefefcfceccadfa8883a4ccc", "sha256_hash": "323f34df57c987b094afce65bfb9991d91208af5ebf1bc33903960b0c89a938f", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000566-addr_0x0000000005870000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000566-addr_0x0000000005870000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_269", "md5_hash": "1505ea9b14fffedc4bb88c4cf2bbebbe", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f45d8cd93adf3408da1ff028acb1ce9b96436af1", "sha256_hash": "d0e1acdbf247ca6021ea1debbe07eca5ac61af3cb56be26df9a2b3eb177f6c99", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000567-addr_0x0000000005880000-size_0x0000000000004000-perm_rw.bin", "filename": "process_00000001-region_00000567-addr_0x0000000005880000-size_0x0000000000004000-perm_rw.bin", "id": "proc_dump_270", "md5_hash": "1b93a91e2ae50ff816acd8718bef22b2", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a7ed3e98ba4e914542de0a699c468311ca7a186a", "sha256_hash": "b3c076b521445eef50ec45f896ecab12769cec0dadadd2186970a584c3325db2", "size": 16384, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000568-addr_0x0000000007250000-size_0x0000000000400000-perm_rw.bin", "filename": "process_00000001-region_00000568-addr_0x0000000007250000-size_0x0000000000400000-perm_rw.bin", "id": "proc_dump_271", "md5_hash": "ef569671e1b3f642aa5c12060102ac32", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6e49a6a12c794f2bd41ffba01a3c750981ef7c3e", "sha256_hash": "17ffb1d4fa346f076007dbff82f77dde1ca7fe3b974231fc9353b1e202d0ccd9", "size": 4194304, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000569-addr_0x0000000005c20000-size_0x00000000000a0000-perm_rwx.bin", "filename": "process_00000001-region_00000569-addr_0x0000000005c20000-size_0x00000000000a0000-perm_rwx.bin", "id": "proc_dump_272", "md5_hash": "0fba885c8220838e756cce9c710fbe58", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e2308e82641d727cef4c6ccbbb1fc4de1b10d94c", "sha256_hash": "554f0cd6bf5315b58372aed2253951ca14fd47348f79293a8b467a238788c730", "size": 655360, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000571-addr_0x00000000059f0000-size_0x0000000000018000-perm_rw.bin", "filename": "process_00000001-region_00000571-addr_0x00000000059f0000-size_0x0000000000018000-perm_rw.bin", "id": "proc_dump_273", "md5_hash": "a314e90f113e24298baf6e0e9061393a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9dc7a611df6d479647c31803067da5bfd175b034", "sha256_hash": "bcc214adfda15010ab07b35c03887d186c97150eb72f54c39e1d9f9709ad2998", "size": 98304, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000573-addr_0x00000000058e0000-size_0x0000000000008000-perm_rw.bin", "filename": "process_00000001-region_00000573-addr_0x00000000058e0000-size_0x0000000000008000-perm_rw.bin", "id": "proc_dump_274", "md5_hash": "7c83dbeeb7811a904009ba7d48993c65", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2923612b74c7443ffe8a54f4b2d1fe0bd6dae0bb", "sha256_hash": "33e7b8ec336fc1fc62e773ae74239f51b20e756958af32dbfc193a7cfa5f929b", "size": 32768, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000574-addr_0x0000000005b10000-size_0x000000000000c000-perm_rw.bin", "filename": "process_00000001-region_00000574-addr_0x0000000005b10000-size_0x000000000000c000-perm_rw.bin", "id": "proc_dump_275", "md5_hash": "7fc7bd7bde34343fec73a592600d69b6", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "408a2d94a719ba9ba4499944dbad6dea50fbd5c1", "sha256_hash": "c1cfbac9a0ae0ab35220f1222ba675a71d52709944337f03aa3835a223e373bf", "size": 49152, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000577-addr_0x0000000005de0000-size_0x00000000000b0000-perm_rw.bin", "filename": "process_00000001-region_00000577-addr_0x0000000005de0000-size_0x00000000000b0000-perm_rw.bin", "id": "proc_dump_276", "md5_hash": "2800ef7c34b4f7b8bf6d2627f9b3c9ee", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "db9b3d776b42d92e9864d5a304368901bb44126e", "sha256_hash": "6cef8d818bb3a1f0bf165742b6ee6aed05b57008522fd42811b1cb9a48a7959b", "size": 720896, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000579-addr_0x0000000007650000-size_0x00000000001d0000-perm_rw.bin", "filename": "process_00000001-region_00000579-addr_0x0000000007650000-size_0x00000000001d0000-perm_rw.bin", "id": "proc_dump_277", "md5_hash": "5a6140844676ab662405d5ced5e845f1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "18889a747a4c310d5e51204ee8f11b200df8c6fb", "sha256_hash": "37cdbeab1479b1f906254e366688443de2045771339f7253a9b4df7ecd5cea0f", "size": 1900544, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000585-addr_0x0000000006100000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000585-addr_0x0000000006100000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_278", "md5_hash": "9f8b0db719c271a247baca4bee390232", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "251a8a512e4f9fc083b17a19304584cc373c3bce", "sha256_hash": "7a665ff1329b41ecbd3017e4db35b1ac33569d9baaeaa704fc86d4132ed0808c", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000586-addr_0x00000000080c0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000586-addr_0x00000000080c0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_279", "md5_hash": "2c9f1e76df96015992f0c1539f0b70a5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6fdd1c1439e61331bd03177dff15264c0d4f340a", "sha256_hash": "7e6742c5d7060fbadcb0c049b97170163a398cc61b5723338eb149ed9446f867", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000588-addr_0x000000007ef71000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000588-addr_0x000000007ef71000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_280", "md5_hash": "52620143fbe83ccca019a2b7d5b55f0a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d017ccfad33ef6ad1e4832bfb1ab257472e53300", "sha256_hash": "85b8ea76f258cd8461996a38c34d91b56e515bd4c3b050d52803c9cfce34f60d", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000589-addr_0x0000000006db0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000589-addr_0x0000000006db0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_281", "md5_hash": "0c8293ac90b89cbc1858c8144ebe6e5d", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8319a9f474512eec324ecf9d1d2e915e9c942104", "sha256_hash": "7979f9add386a6eb2775a333cf5b3c01aa1aaefde89c3f6391f86b491202f945", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000590-addr_0x0000000008260000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000590-addr_0x0000000008260000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_282", "md5_hash": "5022b9ce9036b14bc348d1d685050ba1", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ae5ccb2b1f3f70eb1fb4c86b54729dfc3ad0cb45", "sha256_hash": "d1c4d25cb5391f9e3eadf9efb5e07c0deb1b87893e58808e9470a8219360c929", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000592-addr_0x000000007ef6e000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000592-addr_0x000000007ef6e000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_283", "md5_hash": "fe8d20432bcbb1a97f20565e587020c8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4f3092f59294e6e00f4b0e9869c78075bcbe95eb", "sha256_hash": "85d1bcae467a4972690cb9d8bfea5c35d3b2347a50945e896218172ef608388b", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000596-addr_0x0000000005c80000-size_0x0000000000040000-perm_rwx.bin", "filename": "process_00000001-region_00000596-addr_0x0000000005c80000-size_0x0000000000040000-perm_rwx.bin", "id": "proc_dump_284", "md5_hash": "05e09de3a1f540a63af86213e1fbdf4e", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5613da8a81a36785d7d275b449c4b83be2183f79", "sha256_hash": "7e513bf71b013453e7f5aad77b49d1075d169dd4b7916dbf1af4232b381ae088", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000598-addr_0x0000000007650000-size_0x0000000000110000-perm_rw.bin", "filename": "process_00000001-region_00000598-addr_0x0000000007650000-size_0x0000000000110000-perm_rw.bin", "id": "proc_dump_285", "md5_hash": "28aacf06daa8e9db9452491d6c489f61", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8006c2f2b6fd44bf3833200eb50426f4a769ab9b", "sha256_hash": "9362e0447e333bcc77fddf6663d4006e040c874bb1e3c056f2420d526323dcad", "size": 1114112, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000599-addr_0x00000000077e0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000599-addr_0x00000000077e0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_286", "md5_hash": "c4ca2fe70488876bd309d19a464b8475", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7ee56e5894ef98211579a61545a3efe8de63d690", "sha256_hash": "3499a2acb5511dfe2a5be670a72d37de2948ee0f85091fca73e929b90f7e10c9", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000600-addr_0x0000000007ae0000-size_0x0000000000130000-perm_rw.bin", "filename": "process_00000001-region_00000600-addr_0x0000000007ae0000-size_0x0000000000130000-perm_rw.bin", "id": "proc_dump_287", "md5_hash": "4c9923bce3d34a6ed6a0bc635bd219d8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fcb80120e717abdbf885f72bbdae3495bdf61d3f", "sha256_hash": "11868653187ffd1de16017b4a9cc66971feb85d2695160227c40c47f81e2035f", "size": 1245184, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000601-addr_0x0000000007650000-size_0x00000000000f0000-perm_rw.bin", "filename": "process_00000001-region_00000601-addr_0x0000000007650000-size_0x00000000000f0000-perm_rw.bin", "id": "proc_dump_288", "md5_hash": "20a73f8d97ffc5dcbadc4f92182dc565", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7c426dd606ccbea054886d6a0c8f40ed54aad11a", "sha256_hash": "28f507894bb68dbfa24f7c80ffbca50c8f542fb42a93b16fc753d89858c0f55c", "size": 983040, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000602-addr_0x0000000007750000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000001-region_00000602-addr_0x0000000007750000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_289", "md5_hash": "1c0c3ccaf537aff0750c56f169427dd5", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dd6f062b1c0a7fa9d41f48e81d4b343b77ef6bcb", "sha256_hash": "8de60c673bef6e754bf76c6ad01695680beb22a3d0658132d03c05a3db86b7da", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000604-addr_0x0000000005eb0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000604-addr_0x0000000005eb0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_290", "md5_hash": "d4926138f9dab2ec07d7fbb66aa37921", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d5201bbee3ea97d9410f587f05dcda04d780293b", "sha256_hash": "a6ec67f3bee857fc76c8851cb4d04d44dd4ca270b630e9dd96b2a39382aa783f", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000605-addr_0x00000000084c0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000605-addr_0x00000000084c0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_291", "md5_hash": "4bac458b96129517017bc4f29523206a", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ca1f5ef4ccaff679b6c5f54e7b58501749451105", "sha256_hash": "feeaf6b74f07b157deca94276ac393ce6b0f50a3daad8d91f74bdde32c3d9ed4", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000607-addr_0x000000007ef6b000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000607-addr_0x000000007ef6b000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_292", "md5_hash": "6f12a1a7aae776a58a9803dde6d2d29c", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6b910168e090bdddd429bfff8e7a9a10b383350e", "sha256_hash": "ba6ac619a93a740b4add873b835240551077b123444f1665357e4fd1d50c02d6", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000612-addr_0x00000000087a0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000612-addr_0x00000000087a0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_293", "md5_hash": "36c3822fdcd198e96211357d5676e123", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dece247df0879ede43819ccd18174bb6c7035eca", "sha256_hash": "ec87e1faa8c5dbd8a887735ad9df5e7742454c52cdf0b3b2e9afe0ebb0d80c7b", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000745-addr_0x0000000006d40000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000001-region_00000745-addr_0x0000000006d40000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_336", "md5_hash": "ccb9ba84bb15a85a437dedbaaeb4f612", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "449065cd282a26ff37a0dfcf0acd2b14096ae8cc", "sha256_hash": "59c3b53471f64fa96dcb8c6da71d542d025ba08ce424ca7c162436fbde4d184e", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000746-addr_0x00000000087e0000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000001-region_00000746-addr_0x00000000087e0000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_337", "md5_hash": "ae279af16852dd301dbf1bb83cbdabc8", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c24126126f529d757bb5e6fc63caba3ee54d2e93", "sha256_hash": "524a9945f37045b50b237a6139e22f99f55ad66e8cc93fed512eb0f0455ae553", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000001-region_00000748-addr_0x000000007ef68000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000001-region_00000748-addr_0x000000007ef68000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_338", "md5_hash": "2772fd94777abf2e6295311f447f1396", "ref_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1f52e3edef4ea7ef0db1647f55ec1df07757f6fb", "sha256_hash": "195da237fb6373f05614b972190cf6a3b27d42164f2aee06673ec8075dcaf44b", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000750-addr_0x0000000000010000-size_0x0000000000020000-perm_rw.bin", "filename": "process_00000003-region_00000750-addr_0x0000000000010000-size_0x0000000000020000-perm_rw.bin", "id": "proc_dump_339", "md5_hash": "2729443ea7b6b4cf30df1be2538d2e36", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fe9d7c90d308ff5c8847efd7819c699b5f9012a1", "sha256_hash": "28f5fc21e200e7e079c2cdfeff2c9f3bf5029971906d106a8c7f26e55663b5ea", "size": 131072, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000751-addr_0x0000000000030000-size_0x0000000000002000-perm_rw.bin", "filename": "process_00000003-region_00000751-addr_0x0000000000030000-size_0x0000000000002000-perm_rw.bin", "id": "proc_dump_340", "md5_hash": "97185236976a3beda3c7250ff919d641", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9afc50985ffc5ab3051f78abbd315c716f340b94", "sha256_hash": "dae810fd17ce3a8165407496852f2365a89b03acb98f3b04fa02cd1096efb212", "size": 8192, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000753-addr_0x0000000000050000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000003-region_00000753-addr_0x0000000000050000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_341", "md5_hash": "7f9e7920755d7f5951f9f15b43ade326", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5e19394f7b302b539668967234c79141d0e0a74d", "sha256_hash": "7a65628c0bec85f213f66f5c4b77042c263a8dd5f153a77867187d8d42031b22", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000754-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000003-region_00000754-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_342", "md5_hash": "79ea10e68edabd527093021f411e5033", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a890649a581409b0dc34f52a5f559fe1e59ed69a", "sha256_hash": "fb9c01a8a18c8de6d2b21307d68ea02c347220fb036e668f0b70c02feb15e119", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000756-addr_0x0000000000400000-size_0x00000000000b9000-perm_rwx.bin", "filename": "process_00000003-region_00000756-addr_0x0000000000400000-size_0x00000000000b9000-perm_rwx.bin", "id": "proc_dump_343", "md5_hash": "c60d4c9c1684c802d63053ea4d43bd3a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7e68d9bb75b443a99b5a63fd4b2c1fc3cf626a65", "sha256_hash": "06652db85890961ad470b15c047f06ae4610bbc3b2e3b75d49ba6fc2743b96f5", "size": 757760, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000760-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "filename": "process_00000003-region_00000760-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "id": "proc_dump_344", "md5_hash": "8a2c2e7fee72751c3a4a2479c0ccb21f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "125ea05b574251f8b8ff67b06a54218b945b82c5", "sha256_hash": "a9c7965ba9f1d876727480058038f23592a17bd921faa5ca156df036b2d58256", "size": 12288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000761-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000761-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_345", "md5_hash": "f4bcb51700dd6a7031f0183d711899ac", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "733e7c4eb5d7c838948197db6ae9a612ef8eeec3", "sha256_hash": "bdc01120f82240ca602a1fd5456437ccc03e5bcd97c5d8db5006b3dca3288daa", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000762-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000762-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_346", "md5_hash": "0264b27d74a5b1e05d97d5cb74ee57b4", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ff4aee1c8e55ac3d808008c6d0e7a0632683550b", "sha256_hash": "68cb301e4aa66e74afe6f3ecfed3a29c5062a2403745f531b0cc7b54c0a5d388", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000764-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "filename": "process_00000003-region_00000764-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "id": "proc_dump_347", "md5_hash": "f9f8dc3bd4f5106a9d25064aa1f022ef", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "08b8257bd81f41cd27805c5d237b93fe14583975", "sha256_hash": "981cda5d5f5e15660b11ee473b6a8dcdb7b482cc7f4156c95ec86318457e7d45", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000766-addr_0x00000000001d0000-size_0x0000000000080000-perm_rw.bin", "filename": "process_00000003-region_00000766-addr_0x00000000001d0000-size_0x0000000000080000-perm_rw.bin", "id": "proc_dump_348", "md5_hash": "561dd8b653185594d990f2d4820c6f74", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "acf91a6f2916675addfc5aa865d456c025e44a9c", "sha256_hash": "dc44c5bf712b9fcd013e8ed5561b05ce7d7ee98f7d12f64cf97cd66b56a1e7b5", "size": 524288, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000770-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "filename": "process_00000003-region_00000770-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "id": "proc_dump_349", "md5_hash": "6eeea0bcbc21bd1c0d7f0d6ae3488f7b", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fad191d56abe255a03a7b4b3b641fcfa8a4f81fe", "sha256_hash": "938a68694e4495227ebc925be61a20adb5c6c82d7dd57cc67a2717e2f9f2bf70", "size": 1024000, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000771-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "filename": "process_00000003-region_00000771-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "id": "proc_dump_350", "md5_hash": "caf76e9dd8864dfb7d729847f3595e80", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "71745f0f20bf18b3813fbb1a30eed8d41dc1d51d", "sha256_hash": "f113bc4b90aa0447b7992c2783d7c3b16d63f0e65e2c54c6e93ba833e8e0c667", "size": 1175552, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000773-addr_0x0000000000280000-size_0x0000000000100000-perm_rw.bin", "filename": "process_00000003-region_00000773-addr_0x0000000000280000-size_0x0000000000100000-perm_rw.bin", "id": "proc_dump_351", "md5_hash": "dddcd2dc9ba1953540ef9581ec0cca0c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "252ceb00ad3c948c680b4340465dfaf91d180f60", "sha256_hash": "87d8b69999e244bac6e2a2b799964f311f9ecc2fb6ca75a03c47a864bab18c97", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000794-addr_0x00000000006b0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000003-region_00000794-addr_0x00000000006b0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_352", "md5_hash": "7a0856b57f7c2e3e71f692371d453632", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b73db9064d05640e18f9558851cd7dee49cb472f", "sha256_hash": "b9328cf013123c8fe3ce28f709fe8dff3fad56a3d7cad8aef3ec87dbbc7b525d", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000797-addr_0x0000000000020000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000797-addr_0x0000000000020000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_353", "md5_hash": "a0c7df47199dbc4cb49fd2c4cff90569", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4c036585381748e2741ca59fe5f4dbe0e162abfb", "sha256_hash": "8e1009130fbc7d817bd0f1905c89ef96be13ae420a8157d50ff981d0c34de734", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000798-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000798-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_354", "md5_hash": "4a4c30407062665a8fe94801055c466f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "514d084dfde48a6ffb56499d0ac9e2d3b2198247", "sha256_hash": "e6332b7b92fa6bf85c164cc0c8c57db88299631404450bb4c29982503559f62a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000801-addr_0x0000000001ce0000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000003-region_00000801-addr_0x0000000001ce0000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_355", "md5_hash": "cd586212668e0c84265ae32c431c7e80", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1dc59d0fa2e8a9b65982e0f2929877c91ad55599", "sha256_hash": "31f20750072ea919efeb7648fdab254c18f676d797a736797bbf2aa0e07cd532", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000802-addr_0x0000000001cf0000-size_0x0000000000100000-perm_.bin", "filename": "process_00000003-region_00000802-addr_0x0000000001cf0000-size_0x0000000000100000-perm_.bin", "id": "proc_dump_356", "md5_hash": "4f625366ae1b1fb44f0c6559b4288601", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "091e31f778493b49bae5a411fc71331c96b5add5", "sha256_hash": "5c1af4c236bd97033b22504eb76c870e795f5f8c885259079edc9781f512ceef", "size": 1048576, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000804-addr_0x0000000001df0000-size_0x0000000000200000-perm_rw.bin", "filename": "process_00000003-region_00000804-addr_0x0000000001df0000-size_0x0000000000200000-perm_rw.bin", "id": "proc_dump_357", "md5_hash": "b47240228bfa0c3d22eedbbc02cf1845", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4fa2483f01105934a9a8f1d12fbf4a48bafb81ae", "sha256_hash": "4236ce1b958987dfda060d3d48517fc7616b883a40c09422b2ec7a75d2c32173", "size": 2097152, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000806-addr_0x0000000001fb0000-size_0x0000000000040000-perm_rw.bin", "filename": "process_00000003-region_00000806-addr_0x0000000001fb0000-size_0x0000000000040000-perm_rw.bin", "id": "proc_dump_358", "md5_hash": "b89f7f018f68cf2ca34278cd5e4bbc7d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "76ecb15dd5b013df90f9a0200d2e889e59cfa432", "sha256_hash": "05b99823a78ba43f5f18f9839bdcbf030fe2fa4d9753b51276378b44abfe0082", "size": 262144, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000807-addr_0x00000000001a0000-size_0x0000000000001000-perm_rwx.bin", "filename": "process_00000003-region_00000807-addr_0x00000000001a0000-size_0x0000000000001000-perm_rwx.bin", "id": "proc_dump_359", "md5_hash": "6f87efd92d6a389cfb66c76ab4aca4eb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7e25842a4e8d57288b56081fa7e77516985f9b87", "sha256_hash": "6de1f8e11dd28f492cbf0b1a632772592f6a5d7794238fd1d2aa21a2febde61e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000809-addr_0x0000000001ff0000-size_0x0000000000170000-perm_rw.bin", "filename": "process_00000003-region_00000809-addr_0x0000000001ff0000-size_0x0000000000170000-perm_rw.bin", "id": "proc_dump_360", "md5_hash": "8832a716f23d4f97b0dc4a38e095f9d0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cedef9999864c391cc19e577473675807f6f8782", "sha256_hash": "554823c33f53dfc2d377b0ae6793063b583f1e5b78990941fa387d7dcf4094b2", "size": 1507328, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000815-addr_0x0000000000250000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000815-addr_0x0000000000250000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_361", "md5_hash": "210030b90569c57970dd725fc16bc5fd", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e8f98395b339a33bca775fcd5dea620c99c40b3a", "sha256_hash": "db6f4b54de2d70271104e89948eccc31b5cc1bdfe08ab1bb3f4d70252cc3b840", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000818-addr_0x0000000000260000-size_0x0000000000001000-perm_rwx.bin", "filename": "process_00000003-region_00000818-addr_0x0000000000260000-size_0x0000000000001000-perm_rwx.bin", "id": "proc_dump_362", "md5_hash": "090a9a78567c99501066f66b20fe9894", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "740ba30aa783979ad639d599dae7bb29c6d2b633", "sha256_hash": "454479bf6c8831d70a93f5afa7df6aa31024f1c50a8862fe9df63d1858e096b3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000819-addr_0x0000000000650000-size_0x0000000000011000-perm_rw.bin", "filename": "process_00000003-region_00000819-addr_0x0000000000650000-size_0x0000000000011000-perm_rw.bin", "id": "proc_dump_363", "md5_hash": "bacd322aa2a96d74bc6c3a70c66cdaa9", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5cf5efb1592cd2aeb2d1263401598d6e6485635c", "sha256_hash": "d62bccb4e722f608ef036bc938a9ed4a4196aa84e57b836f7701f6ffc8a6d84d", "size": 69632, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000820-addr_0x0000000000270000-size_0x0000000000010000-perm_rw.bin", "filename": "process_00000003-region_00000820-addr_0x0000000000270000-size_0x0000000000010000-perm_rw.bin", "id": "proc_dump_364", "md5_hash": "ee99461e045afe50dcf86319657c240e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "04904c8ac3708d0514e3a8f913600dfef7893cd7", "sha256_hash": "950691858e70c783c990c282dae615a1738e062b1c8e95be5ff708a84c663e62", "size": 65536, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000874-addr_0x0000000000270000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000874-addr_0x0000000000270000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_365", "md5_hash": "eb0ec6eab954229bc3af216a579c38a3", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5cdd458c046b9d5179249ae26de71c02370700be", "sha256_hash": "eb72e8d9277b84a0a7a6fa53c4c78412e0e1029c430005c6243b1cdd5f87da43", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000875-addr_0x0000000000670000-size_0x000000000003d000-perm_rw.bin", "filename": "process_00000003-region_00000875-addr_0x0000000000670000-size_0x000000000003d000-perm_rw.bin", "id": "proc_dump_366", "md5_hash": "23f0d8b7ae06905b5978fce6110c53f1", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "51ab6931889a82b76a44ca4bd76129788169029d", "sha256_hash": "ac0d06734f675b1174e105cc9d6bd5f253e272f796145ea8b04505869d0533f6", "size": 249856, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000876-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000876-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_367", "md5_hash": "6751fca38f37e68572006c39ac37c387", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "70883848bc9de31abe32960b9c97cd10bf6c6951", "sha256_hash": "b35c2409ad9b17b2449b30f2af004b8c5741d9e8fc8b5d821d2cd14f74f09bab", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000877-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000877-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_368", "md5_hash": "c0166a07d5999595e378c45fcaa65f42", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "383668c0c1d0bdb4568e2645e87dbe6733a1c259", "sha256_hash": "1cee031b046e5455c579740a89f82c43788837b637e38701bbac2dc108d53612", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000878-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000878-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_369", "md5_hash": "1cec4d48a7f52aa5197975551de425a1", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2fa861d2b241aaa485557db045cd95998499f218", "sha256_hash": "ae2266f5e2bed74ec722237c11b81b6cad80c2a7b67352a9738d695c6b2b45a3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000879-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000879-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_370", "md5_hash": "cf362e85cbc6df3e6b71cdeb08d7da9f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e16f38c215c0767f76ccb3cf43f6425465283f10", "sha256_hash": "83348d3b85e7c9f56fe73f024e0d823f31bd12331fff4be3c85d5f058ef977a9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000880-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000880-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_371", "md5_hash": "311fcd03ce8296f7dba7194142b3cd14", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f2088882d6fc61895478adbfdfa5b24136f20c0c", "sha256_hash": "c1de35fac15c55d7e6fa892ba6f76ed4e63aa979cbe0165a61bd421ef23b4f8f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000881-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000881-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_372", "md5_hash": "07225fcc8dd53ab05bf8a7ef1013ec3a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ec7e833a910ff0220ae9d2ad6b656b88bf90323b", "sha256_hash": "39608627249c9e794937ea161c0452120ca6527cada703740a9840ea904b5471", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000882-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000882-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_373", "md5_hash": "7adb2c88e6284de501d1170644ade4cb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9397836e83c53b50eb681755277bc9fcafe00a93", "sha256_hash": "c34e035c79bf611b5a2c07e0321240108987c7fe31f785faa7fba37620b94945", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000883-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000883-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_374", "md5_hash": "5baa70ea0bc9acc04302adebfe386352", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "495f0f62becfa0ce3b62790b8136ce638ad4bb5a", "sha256_hash": "38e6b8fa7fe0bd60989eca7fe373b719f9e575ec704113a5e86617ab080d08dd", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000884-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000884-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_375", "md5_hash": "c650aa4f2ccf0c14dbfa54a09ef87355", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "831938d5423f290af62cffaac0221fccbf3c5a6d", "sha256_hash": "6599acd808ad3cc07c7b2d53b4c0fe05d9579b1299ed4774d28665d217399909", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000885-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000885-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_376", "md5_hash": "cd8735ee37ece918d0fed675c75f99d4", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f99687ba387838af560743320cadc56bce95d636", "sha256_hash": "11c77650c3fa413694f80bd4135089f590e3902a9f5ead202afe9d2590e9beb3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000886-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000886-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_377", "md5_hash": "6520cb5ae68c61d39e90e13af1296f7d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "30efcc6fd7961c204a31e949af4c2d0af98f5462", "sha256_hash": "98702168fce32e6f551dfe6ff2b949d7a247413f213b4c0cf0b0597ccf460aca", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000887-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000887-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_378", "md5_hash": "46d3513e6c853001cf30629c45ed2afd", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0249f725fe1a6cc249220132f57b900f3997f747", "sha256_hash": "239f8c0bc8174748f5154dad29e4c7c7039be0260b17b608ac4ce710b7fb4133", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000888-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000888-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_379", "md5_hash": "464f15ff06ab0f9499d658298ac419b6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3d82e3eecc2e5bbc23f43ddee99a502057b17b3c", "sha256_hash": "755bda976fb2cbe7743cf2238e908b2caaf0855d5e4bab4246805e5e51efee8d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000889-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000889-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_380", "md5_hash": "04a88eaf83d9fbedc2e54d0f8adb628a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a801bf4a403c2f8ca502d014942e305bacaabe4c", "sha256_hash": "a1d87f88ccb2e542a60edf8c61b79e2f2cf15b3fc06721b259a00233f217646f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000890-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000890-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_381", "md5_hash": "99439e7758c6457206340e639d1fbb6c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c4574e066c9cfc3d8e0e2bf3f4e4ef2680f74f51", "sha256_hash": "1d963dc6234d09b5a6d4a0e1f34bbbb86abf2cf72406b990697850dc8c6609e3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000891-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000891-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_382", "md5_hash": "ee129cf2d77932271bd8baaa852bf5a6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "de62e53927ca156386503cd791a9d0fa4a7e6c6f", "sha256_hash": "83718fca216746e1706a05b9c09d6dafe3f72df250ca837ff57f5f4af05299af", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000892-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000892-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_383", "md5_hash": "bc7767249fa1a3d0e1ee3254e700e832", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "10142ba1f8b64f176dce2ffc72bdaadc90382a37", "sha256_hash": "e99b7be488646fd8ee98339a1c8a84d741a3d37a4d374a336bda9bc44cc30f2a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000893-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000893-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_384", "md5_hash": "4bb91312bf304e2a0acce83c5a113a19", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "63be21dfe735978df0b0717e9f14bff30fc2414c", "sha256_hash": "1d4369f431cfd1555af9f6957c79e5010849463be5bf35bc8ea40ec3b8bbda01", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000894-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000894-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_385", "md5_hash": "5524c0f3afd57d9aee2ad01aeb982cd4", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0c7eb85a8f9094c6d0e0a1a82462c5a0a802f594", "sha256_hash": "40fbd738f6e583fe54298b1b397a54f59e03553005abcab3517122263ca545bf", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000895-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000895-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_386", "md5_hash": "8f48acb24b46c3a3dc2208ce4325b052", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "aada8a0f8d107269ff9d8c8db940a6e85ae40e6c", "sha256_hash": "bb95d675c682c9a92f2e76bc7362bd6f4355463e768e4762ad06501bd2951f67", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000896-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000896-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_387", "md5_hash": "337bb505aa3b872cb7af7c59b0ef8a17", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6a5e4fc0f0235ab5d9f8de395e367d969fe899ab", "sha256_hash": "69f752b2131e6c144344bbb59486850695d4e9f6215cdddf40027e052e69dff7", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000897-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000897-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_388", "md5_hash": "fa3c3c577347041d726282820a30b964", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "deb80253bb56bfb4fa868bff7aafb5762ef934e2", "sha256_hash": "6e24d01876f3069924a6a148e7e828ee5c28f915b3b2ac9cc3cae21fe94d2763", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000898-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000898-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_389", "md5_hash": "df81707fea1dcd81e5a13cf60635fd4b", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "72534739b25761456cf72f33b3b5f643b5aaeb66", "sha256_hash": "1f48082dc3827db64aea7b3bbf0e49fbc9693dab72a9a7a70411aee0414b17db", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000899-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000899-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_390", "md5_hash": "31c6a43f43f7f8c46443a3ce3309dd28", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a2be46ff221d168cbae37f50e7eabd1d4cfe2b40", "sha256_hash": "0c78157599bf2d741fdb481b40966b203d563bb5d0452edb91fb3f8970e4199d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000900-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000900-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_391", "md5_hash": "7d468fc5395bebbe76d244fd511a27e6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2a763e78c93fee99279ed1b4a0d67610e38d38a9", "sha256_hash": "b129743059924a497d5f424e8de4ddd1a86c0ec6c6a6236f10f815a6c8f67043", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000901-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000901-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_392", "md5_hash": "a28ef0a35450ebdae90d1e6113197c0a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ac62463ec927f03c78df20679623f961e5caba8c", "sha256_hash": "2864b2d24190af559f05672f5e72287bbbf26f98121d35b17fcb11ccd18604ed", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000902-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000902-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_393", "md5_hash": "295764f528f9033aa8d96725e671a027", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "93e44f5a1d6fc3a3d4565f92b800a682409524e8", "sha256_hash": "2175350038392c069da07a078b1d2aa4214ec215558727f5afed3173fed834a0", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000903-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000903-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_394", "md5_hash": "e18afc753ee49a1f589fe0cd5480e56d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "20d50688a8ccb02d6304ba9b1bfa8b8e8b8868db", "sha256_hash": "15ec269bbafddde7d7b18eb0ed7dbfbb822c9b260d848ac078fff0726b5dfc0a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000904-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000904-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_395", "md5_hash": "3d3e2a6f71a25e77627225a465473049", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e59ce70cb5a32efc14ca122b83091ad9d7d69ea2", "sha256_hash": "d4128e6d91294f24a609169268fa39937d212dfbb3bcca8ee460457ed2144281", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000905-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000905-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_396", "md5_hash": "c0744252a9fb48e58f09d468a3c979ad", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6ee56d257b19cf06fd25ef8c73d55a6e0380843c", "sha256_hash": "548b4ecea4b5e48b30895d1ff43a73387dc37f737e4a69bc4747dd2e72f6d3ba", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000906-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000906-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_397", "md5_hash": "e6bd577deb1d660d8cc0a72e743220db", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "718c1c92cb846ea3f216ba90e333e89ecb512c69", "sha256_hash": "083cf3d435c2ba6350895cf0ea769796e4019ebd4be38f001f89e6d7f75684b8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000907-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000907-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_398", "md5_hash": "0bec283749e1d5b783a45f2e2222d122", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e5b223b17ec875196a9fb1fee3f54661e07796d6", "sha256_hash": "9dc291f2593f02e452e61b1c679510d1c32645ead2c1a24c10bf2cf887138426", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000908-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000908-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_399", "md5_hash": "65175f9d7ec369b3d0fb66d8b73cc762", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7aacd13433b34b76b7e2e6d804ad4c6aed175e69", "sha256_hash": "c92b114de12ec8128cc863118a61a1e0608677f8b43acb11eb30cc044d55413f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000909-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000909-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_400", "md5_hash": "26ccc2c922018e9af20fc74205bf2760", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "354456150f8bd0e0712f47fb5d7ab8dc832b55c7", "sha256_hash": "fe84d37eef301c69775530c87023a1980fec3b18405dd3c3e1dc8d9316231f61", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000910-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000910-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_401", "md5_hash": "74db8a76a485a2aefd3f68f69e2d07af", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "75cb9193176bcbfdbdbd899cf0877cb39d7ed416", "sha256_hash": "d14d45a79f5ae49caca2977c290d7d711f9c2e02978c2ffe2129c5c88bdabf2f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000911-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000911-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_402", "md5_hash": "319c830da4757b6916921b5956e314b6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "de2a6e2beb23a37901a46f774710b7c69f281450", "sha256_hash": "6724434447ba243b28b51fad84f64e148ca09c068e70d61414581577eb39386c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000912-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000912-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_403", "md5_hash": "2df77cc268b9fe0e298f365577191ca6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "be07a2ffb22f420192311e84b496dbd3d3ddf80e", "sha256_hash": "ebffc4252893f6198d6057ad20dd4816f48e123435a2c33fe7af66d8b7e879f8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000913-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000913-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_404", "md5_hash": "d5d5673d97e5fd5f8885fe04754ea1a7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1301a78845f018d6469497e5062f4379eb36289b", "sha256_hash": "eeb9695329d5f4f0ed63556a032e4c9cee6ff5c6fe57d4f6b705e1968d5b28a2", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000914-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000914-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_405", "md5_hash": "5aa04f34772e86b6c6b22fbfbbfa545e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3f76ef7483df2f595177978637b98c036f7ac241", "sha256_hash": "cdf51e4056424e918ae32bda4519f99fbb0f03644183a2ea4c9b4c6e7005498e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000915-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000915-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_406", "md5_hash": "9163aeb6ac522ae25a7027fb4039fc29", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a522d372e33748aed2ce479b5324db025c027bef", "sha256_hash": "fdcc2c53012bcb8a29e1ba7e7b8a715c996a845a1f5efa423493728c0f9daa4c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000916-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000916-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_407", "md5_hash": "8cad5e6be25969f557d4addfab0745b1", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9e4fc3b661e02f65545263912d17805241acf229", "sha256_hash": "fe9379e2c54e3f4814e7e6bd322faac64dddf584e0acb4fe116c4f3c9d9fa9a6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000917-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000917-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_408", "md5_hash": "69fa7b73ae476bdc0378b8f319afc2fb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b4e71195ac23bba21d8e37ebc8c04593b38f8b15", "sha256_hash": "4d3ea22f13cbd012b10a5d76f0fc9353f4a04af3f158ef732254c4875566f500", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000918-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000918-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_409", "md5_hash": "a9bcf6a2238f2903ac50c4cd43b40a9d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d3abe50bccc98d2262f76df2402cbf296c7e185f", "sha256_hash": "e6075b2803a3fc08c9dff6943d9cc4681885cb5c32ce87dc7e099d0511c2356f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000919-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000919-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_410", "md5_hash": "e3da8cb88c9bbfe9815ca985b0e8b040", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ac897d998471cd1b123dcd672ba4ce21ca0ca28b", "sha256_hash": "48bd8692059f469ca722f314a850a9315bb17c6d07bed3dd63ca0d38e7e9effc", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000920-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000920-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_411", "md5_hash": "67ce0d5a98d103426a44434a8e7b367e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8ee2070f750efd8ba94977a6b7c4b28b01be1051", "sha256_hash": "f93653ad0a9739bb4e208f8b4dfc487cdaa8d0734b9c4c489e5331ddcc8d7d5c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000921-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000921-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_412", "md5_hash": "32c5ee57ae6cbf5fe2fedfcfe120d950", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5975d7cce1377f53a1b980a29b8f78ba721e289f", "sha256_hash": "ffd48dce4893b0993ea053d535ff559b319af8947559f92a0cd93f4a2366d4b5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000922-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000922-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_413", "md5_hash": "16af9b5e0cb6962660227012d906d698", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8ba8cf1dfc0b1330b1992591e608d7363c838f34", "sha256_hash": "8fb61d125241eea4ad974898188cb3a82f7cbb2aef392d865c9678288e1278fe", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000923-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000923-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_414", "md5_hash": "87975a623751b89c5f8e8c20156be7da", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "26e1793aae2ddc26dfd4742c7f333bd82c3c58df", "sha256_hash": "00a45f89a281f1eddb0cad1ac2d2a8d04b4fe571f9f2c0ad2ad427d915e2783b", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000924-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000924-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_415", "md5_hash": "de9b107e030be14dcde1b5c3d4d7c15a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e0de9ac94d0122bb349b59ad72a862afc3dd8105", "sha256_hash": "59e13c6fb5d5354b96b6ac36e528297d86aecd470b77a86131fbc3a8543c6424", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000925-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000925-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_416", "md5_hash": "b7c7c772408ebf1d0d3319aa1abf9fc5", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b4ffeb9c8accf804c2fc2efe220a9b19f2ca3bb8", "sha256_hash": "014621e3213e58f44e38de854793e51f3ac85f7235fade66a94026d105226e12", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000926-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000926-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_417", "md5_hash": "38e95a53970c597abf61becdbc8419b1", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9e7430087127840119ae3594eb4fe2b3925b5e43", "sha256_hash": "d9c3e78b93ffc415c5fe9c2002345af54a4a0b7c83c2b8c004c7d0ae76939b17", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000927-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000927-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_418", "md5_hash": "c7347589aa4ccdb3654a021641f23667", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b5bb29c1a180c83065439b4adb230b5ce8a2238b", "sha256_hash": "ceb1c1f9a940b0cb3d77baf7693c1a57889015279a0ea1dbeb7db46f475d9e96", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000928-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000928-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_419", "md5_hash": "35192a0b0182418b9739ab63f3a1dfae", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cdb3765b322b723c7a78e1e89ab2fe2209f3f833", "sha256_hash": "d8958654eb19ecf71c71ef34be78d21ca4c8d6d013132f72227acf40163273c9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000929-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000929-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_420", "md5_hash": "6fd33e55572a84cb7754a7cf9396caf0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4a26e946b08102500781a307563ded0d1fbabe59", "sha256_hash": "de70b9eced9e80965225561620cbefca6d62237f7a013f7bb536a8a132ddb58f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000930-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000930-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_421", "md5_hash": "5503b8a9435fa6f276a4028e826030e3", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cebd381a909b3a44c3a5f18c01ff3d584bf0004b", "sha256_hash": "28075e59df48bbadfe9fa842444d5b4130ee8b3fa5f4c95c464223bd9c0e83f7", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000931-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000931-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_422", "md5_hash": "483b5b97438fa1b064f75d7d8b17dbcb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8ad257942145a529f17e8a8a9ecfe103b03fbf03", "sha256_hash": "8aa8e862324d7674ff460fb328b3976665f2414ea011c13f5be5620844f0a2a3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000932-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000932-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_423", "md5_hash": "d147225f02c6e899307902b21df4955f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0a9c8a3bab1ac9e0cc6ae5f01aae71aebdee7109", "sha256_hash": "84c43404d620969582a1c4441951117e452b346cd507e7ec62f866ecdba61af6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000933-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000933-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_424", "md5_hash": "2085bf0eba67a8898ec0e77da01b8b41", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "017f0a918d3da6285335e7381f4b9a5a35571ae5", "sha256_hash": "24ab96727dcb842a464bfeb700d72e9564ace0a92d6f549ccef28c698136c90c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000934-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000934-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_425", "md5_hash": "1f8e3fd86cf7e6c9dc7ff2871b5040c7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d9ec0e47f8d18074d292e8800d93708659b68181", "sha256_hash": "402b43e944fd765d4cd4cef52022fe72e74fdc323d049039ad1813f71ecc4c0a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000935-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000935-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_426", "md5_hash": "367b537349e99ca52f8ee33c79be27ee", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e61d69b15a9239652c677035bdde2b1c37c31e3c", "sha256_hash": "8f85486745d88df862a0c9f6950dbabe6fcfb33baeaeb75e2e0cc196b162db6d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000936-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000936-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_427", "md5_hash": "622c01ab71f35e826090747ebdc7d9f7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "af44e9102933b85f174fb8f947adf2e2bb96adf9", "sha256_hash": "67ed29c7b8eb473efe53f93689e75eee16654418b76dcff357dc5e34e88cf046", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000937-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000937-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_428", "md5_hash": "e1f4eb004893a20c817f60bff45f72df", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d3c85625350d8b3481ec46ab521b8c5876797e09", "sha256_hash": "2e8bb72d3bf88ea3f4123ca3f229cc237e544a5ec57c47b2e4200ad944c0b7be", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000938-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000938-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_429", "md5_hash": "58c69740b6e5b87e1c2b8407d6b3c4ed", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a12b6e5708b808268a4c3f13bf94687f0daafdaa", "sha256_hash": "a376b690a0b7044c3069eff665292727505f7140028f114d75d0a5cada4249d8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000939-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000939-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_430", "md5_hash": "7a8d07e874a2a02ce070d05c90e92452", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "129e468afcd46f2d1ef6f95af0d9888df21dfc7a", "sha256_hash": "b574ded318893ca43781628063f2d6a57734bb3cf60746e9adb1b98f6803ef68", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000940-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000940-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_431", "md5_hash": "2e39cd08d7d41f4c897fb427f0a4576e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5190d21a1a0e5e359282d481951abaf358507202", "sha256_hash": "894d2928ea83efe717de2b0151e2ae04d6f39e281a18179dae44de5016095582", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000941-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000941-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_432", "md5_hash": "abb3748670c7bd2ef2e42de5d987eb65", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ae347a6ead9f53982ac6ec4c3a90927343b54249", "sha256_hash": "460450668dc7a6e36380132c2dd83a371829576de64d54deb125d56b1a1f798e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000942-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000942-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_433", "md5_hash": "5e175ae63685f8f0be787ad49dfdcef4", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8c61ea12c66768b465aec996fd200991d1452305", "sha256_hash": "0ee3d02134c5548c663495ee2c0f5a34eeda22e6559d0282182d4b3c28d89e5c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000943-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000943-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_434", "md5_hash": "7ee5528802b34ce73853a408214be62c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fa98da44eaf9316230f46948ec8f252f754f7a6e", "sha256_hash": "2eb3aa157205d99a0c9a481ed31e5ad65d88353b5299ad6baff0ace3efbad317", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000944-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000944-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_435", "md5_hash": "866ea297d6c688f32b5b40ff1391f54c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5ea0861f41db28a5f461a8300d164c93c2130399", "sha256_hash": "fc6625785febf13317caffc9e8750bc2ccb06c9725b7d219b843c4fa4c5455c6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000945-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000945-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_436", "md5_hash": "118cb9877ebd01a8e87adb4906e79c14", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "30e9e04b67616f275568844eb8034cae759bc353", "sha256_hash": "d163e0377ee44bc36001947034fb884e7e591313400d1af0567e49aed5d8d7b9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000946-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000946-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_437", "md5_hash": "67cfde63baf3dd5ac2d0e72593f804c9", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "47a7ac6608bf93e555d7ff02aad08c3e6eb959f8", "sha256_hash": "7eb87b179a111a65d8f96035cf067cdbee888a1050fd0d4147cd483812af30a5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000947-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000947-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_438", "md5_hash": "2b3f00eb20e77c2549c453b2b20f5245", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e7db296e1d302bd40bf64080bd0dc1513519efd0", "sha256_hash": "016aae3d45931f0006a58fd3fb2aaad2a1604b0c2b6b77fcdd3c9cc4c87e6018", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000948-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000948-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_439", "md5_hash": "6d070aa16b794a7bfc1a854901a4dcc7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "11f25dcfb29dfe662137188dcadc6d792960db16", "sha256_hash": "b653fe3d183e800c37bf58d3a91b1bf4426971852b8639329755215dd5757866", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000949-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000949-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_440", "md5_hash": "1b80adaaba72854736431afffd261884", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "882d8cca320e55566ad1d1b1e42df5814d3de361", "sha256_hash": "454234983159af3f4e4f8255e8b5ee45f681c8a6e215cb7eb61fb9e263547c22", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000950-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000950-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_441", "md5_hash": "8c09484a8fbd2e246cfbe1ebdbf2dd70", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0722983e1c052b6ac12be6e7b50a87b2da6ebad1", "sha256_hash": "cca258c036ebaf30f97d308e4ad9b4be6f2e338919468f001ee6b1cec02b3344", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000951-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000951-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_442", "md5_hash": "16883f454736a7bd9dfe62373bf42b20", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cf86f773f4e2d291f6f4f3c3c13f421cff3b596d", "sha256_hash": "c3de24934629d16def7a3dbb2e4720e938cecb1b4f3a771ef0d3f8e100002a41", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000952-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000952-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_443", "md5_hash": "9296fd69e4bf4d4e0bb31a53a6ab4617", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "852024b2ee3b677e839400cf28da9fa387aed3fd", "sha256_hash": "8ea73ce6dd54ce4385e3b0521f90c5aa186806b450e6d882c7bcf3454168cb3e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000953-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000953-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_444", "md5_hash": "e13ada1f474cc2b80845a53df0dab27f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ce4bbb81a998651f288366387a62a11dd3f7fbb9", "sha256_hash": "b923a43e06b3c4c97d337caa741a24042c4dd26e9f3876cd192e9cebf0266060", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000954-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000954-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_445", "md5_hash": "aafcb57b4a632ee58aa2f7401496aaec", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "25752836846e77707d4099d2681b9c6eb94e86c0", "sha256_hash": "3fe4fe57b52bd01b099846773673f839f2a4277b4a84546a448b8eb2d0344d37", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000955-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000955-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_446", "md5_hash": "5df352cb7cf4bd0122cc80c135106b98", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c5d04475a409e2cd399fe777d6265cf14c6db3b7", "sha256_hash": "355c300300f92550dcee45372ce8cf26456940429aa24a3bc95eddb467957e7a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000956-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000956-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_447", "md5_hash": "7678ff6bb4de855c8e414fcf0e0fc419", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4c4713d1ef62e2ffd98641fda27c123a217a54cd", "sha256_hash": "a35c6d0ac7589fa2501335f95dac05973d0c8375ef4d18d03fee98b42052e6f4", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000957-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000957-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_448", "md5_hash": "8c9ce75b7a25c96fdfb27c3f862468b8", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b854113325ffe942879e8e53b043f1c0c8cad390", "sha256_hash": "335afbcce7ec6d50a19f2fc08935d82b1d4919f34d60f093b09bf2155f9aea47", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000958-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000958-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_449", "md5_hash": "a3d50399973b15c8a3227894cc639d54", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "aa803285171619c56972a31554ef27bc7b53fc8e", "sha256_hash": "e8599a3c406453df164fa29d32fcf40cbe49ddb7183196c9c0a6020b3e0834d9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000959-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000959-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_450", "md5_hash": "6e77afb5ad8d4e8d0e2d75137f725139", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ea81521dc4fb2c21b8e6510e4cb63fc748b4811b", "sha256_hash": "c0d53c78489bb83abe110c8676a1c8c81ce4ca9497e9f45b0bc130568d62fffb", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000960-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000960-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_451", "md5_hash": "52f58c6c7d58e61374d857bea409e95d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d5214a5cdd61b1ad674ddbbaef6242d860ab8deb", "sha256_hash": "9ce0dfeeb4dcc5b1ae24fdc514a96c85b570f9b2ecd1847bd03d697037c2646d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000961-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000961-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_452", "md5_hash": "ff72beeb0e5258d38b5289a441ffa5bc", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "050f8d6085347c19f2dd12d0422ee4d761ffb4d9", "sha256_hash": "1eb153251ee4b69469d8dfcbb46c77f0cd64d6ec6c151021420cdcf7324933bc", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000962-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000962-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_453", "md5_hash": "3269dea461a6946abd99b598770e89b8", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "cfda74e6b7656d8fa7ed7f2825a992fb9d3e61ff", "sha256_hash": "c78b57d926cd13adf63972e05037ae5ca8b24d67bd1a464049eb6980307da57f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000963-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000963-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_454", "md5_hash": "d30a301bf655b285ea449c48e878a423", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a7795e433633c9ecdaab6294f61fed32b6cf12db", "sha256_hash": "342ad961d5be68ce0fa97d222680680df4cab9301d0ece02d326414fdc091ea3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000964-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000964-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_455", "md5_hash": "8ed64b14749ddfb42de36543a24e27bb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e3ce944f4811018d4e8949a02dde6a4319836ba8", "sha256_hash": "614bbf510a618dd41f0cdd43ae5d583b5bd18c1b812b0bc9103a0c306668dc10", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000965-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000965-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_456", "md5_hash": "b524e701f63aa3246e45eec8fc4ddcfb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3fd4cf098e9eaa464e9acfa03d5e42d569d26e78", "sha256_hash": "72b2b392627e28277dca5547335dfefc6561c3427aaeccae368d1f54ec6be3ba", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000966-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000966-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_457", "md5_hash": "cfebb5f15b12e4061fbdca25373ba24a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "6aa9831ea2eadb71e3a1df2e85030d528fa3f24f", "sha256_hash": "7967e1e137125db9d57bc8be16144c4e5206b05b557892f2bc44d792bed33576", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000967-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000967-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_458", "md5_hash": "af0ef7d2cbb5ecf2272e9cee6cd8b92a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e84f40dcb70bf5ca5e129d1a25f6e9e7443ae507", "sha256_hash": "403464c31d36e5f5336193d5719de974f1efa456c1f61b4ba9dc5329b0e65b98", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000968-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000968-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_459", "md5_hash": "c280f7a74f8f3abacab49bfe29f179b6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8c989b497e83f22c40c19a20420629c16eca45e2", "sha256_hash": "20d128cb4b18d8798762406822f1e59c05cd1ca871800ea6e983f4bd20900a1f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000969-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000969-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_460", "md5_hash": "63f20a2d915d7b3b0c7c6a049b4f70c1", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "dfda1d8c24c2700ec8b89f31bf92c8251b9f6ba4", "sha256_hash": "e82a2ed272f11c204b4a447f4bd14f281f9d41ac95f74990aff92afc5587410e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000970-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000970-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_461", "md5_hash": "e031a622d06bdfd6d454f59a5ae79a4f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "db17a95031afc12c40dfa9f2038d6e46da1e1804", "sha256_hash": "72d41bd5c57d748845b6cc1626b861cc841bda46b5f7c684d7545c07f7db9026", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000971-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000971-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_462", "md5_hash": "d285a8251cfb011ff174721bddf885ee", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "19061be26ae6734b8e6bdf9c71aa3595ce3c5209", "sha256_hash": "9699d6ce9aae66e1bebce72a0e92359a91388c78f660c449f1d20d43a40fa217", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000972-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000972-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_463", "md5_hash": "4b3944da92a85fc106d8ee0dbd2bd6ff", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7539f54362330be1cae8d8ac1f96b5f426f7f13f", "sha256_hash": "2dbe942d3d777a1982771735cf34840b58ced2d84b641569daf4c61a88a5b7a1", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000973-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000973-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_464", "md5_hash": "37a476041b27ff51c7c21c8ac26bc8a7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "680b9c334653c4a7dfb4c123b97f1059ab9f5fad", "sha256_hash": "2c123a16f343d776332fc2fa02255a993dac56b13fa166abae59188e3c15503e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000974-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000974-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_465", "md5_hash": "cbd8d03c80f990bf7226bfdda34e56ad", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b9faf6445c9ab48218ee7207ee8bafd61459d412", "sha256_hash": "e6b971999992144d6b895295ae36d71ce497b5057a350fa7bd3008022a0ce6d5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000975-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000975-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_466", "md5_hash": "82609b1fc3009654e5f88ce1ba1b616f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d5903359d2959d5a766cee44f7b244eba28080cc", "sha256_hash": "1da66309283348b577876a7d5ce21a82d7a4a6a072d54850ea2e372a48dfd6a3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000976-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000976-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_467", "md5_hash": "cf015ebedae7ba147f78cc0f0bff183e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "525d6bc6b94488f9163e1cf5dde64ae160444d17", "sha256_hash": "3a5507dad8e9da5fde9e24b3355996df777fbee1a1c37f76f34ff110708a5416", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000977-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000977-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_468", "md5_hash": "d0b57509bb71e9bc2eceaa9768ead234", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c4c5af5afe12193632f223f74b681f748944674d", "sha256_hash": "23a5884346229fee8db61d0948613f05a27a8ed898d38a6fef584736c3c39e2d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000978-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000978-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_469", "md5_hash": "3dc624e5b95467c8cd5172a502f12ddd", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5be2be9f2fd6626530ee626d6f40c56be830707a", "sha256_hash": "21767b67e6e896bab374f096483903097ad2fd0444be5c9be59e17bb025c1845", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000979-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000979-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_470", "md5_hash": "28fff499da722e5dd9c915002b611599", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "0b212afed29ba7758eeb6365f74fd7f3b196d1d8", "sha256_hash": "afbec5e0f8fb5ee6ad6e19634047b675de0debe5af70e45aee4e52d9da656ea9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000980-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000980-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_471", "md5_hash": "3712b7fbf748d17f17fd054ba52ac688", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a714c01d44dcde6d878242d554f89bd050efe4d3", "sha256_hash": "d8bafe433d5aa7e39daa9405f090cff062bf73228ba59961c0f5ddfebc1a21d2", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000981-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000981-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_472", "md5_hash": "bcb8167718245ea8a8c5ce50dd433dc7", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d3b42034c07d32c1d97a901a87552232b983a189", "sha256_hash": "a272c7073bef4a04c0a1a28300472dbd5cd663efa0e2a036c87e4931dc9bf0a9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000982-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000982-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_473", "md5_hash": "59e7a03b1f9a58bb6a8b6067270ddd6e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "32abc66f05aa5743edc43525aab1455ac5f8e9e4", "sha256_hash": "9c00e6f2113c5e27cd852d3c49deb9d6b4d5c9acc4f10e0e957afd447c33ffca", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000983-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000983-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_474", "md5_hash": "043a11fcc3a7fc2266abe359020aee34", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8ab142ad294819cbe207172730f90c94edda8c79", "sha256_hash": "ec3968c4d7222239c85a88fd4d5030a99b384d82f4de8205d476759cc4ca10b9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000984-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000984-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_475", "md5_hash": "66733ca6b457c5641b58cc737d31c8cf", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "28057166d03f226fc21aa6eea19ab124fa399c48", "sha256_hash": "134c246347af8802e50fd5dd32d272f60af14ecfa217a6c3bd831e65f231d3c5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000985-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000985-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_476", "md5_hash": "390726e2053528eb6f952675edb831cb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "698cacaaa51114e5b95c4ad40697ed4b11cf6629", "sha256_hash": "dc1b6c4ade67e9f1487d94b1d03e5c4765ad6e090fa172000dfcf70e1b71f2c0", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000986-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000986-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_477", "md5_hash": "d55726fbcbc051208c3da2c89edc211c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "aa4016cc094fc8b8d9221314f285c96e342a3fe8", "sha256_hash": "cdd88974193d096bf2ededa3930b5c6a533a986054c4f6964e6938ab638000c1", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000987-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000987-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_478", "md5_hash": "bf7fa1a5d1c5ef9156244ef78288c740", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "3269f67fad4f6c06b4ad57b6165773018be6b146", "sha256_hash": "ec9f280eb6fbdf65d1a0b664fc8252d86bc4561f18af82bcf15385c521217f90", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000988-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000988-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_479", "md5_hash": "6e5db496df17d88a2d3190a9612f6dc6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c04c5885e8048cd9cafe769a42bdef888e9bdd5b", "sha256_hash": "474aef3cb18a8538dfebb7063a162624b4e7a3c261523b51a952b2f3b6df0540", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000989-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000989-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_480", "md5_hash": "277c867c7b9f60335f09cf6144eb255b", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "2cced0a5e7f2902241b1685cafe45b4cb0772620", "sha256_hash": "676889d6adf5617d09a17313621c25e783a16eb7f6e0ac9808133d45f0e46830", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000990-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000990-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_481", "md5_hash": "652436f15e0b5824fa99daba01b88fab", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "17fc04eb8282d6902b50e04b5377c3d39cb9ab30", "sha256_hash": "ec4416cde16b8283846b15aa38f239dce9791406d25665b778ca426dec5eb88c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000991-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000991-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_482", "md5_hash": "3d8a4117ad26b419b0d6777aa61ce427", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "fdfd79b51dc93182597eac6bc28d99409a412ee5", "sha256_hash": "bfba1609cc49871717f31ede6a005903058a10e9e8f54d07f0707ed0ee64b4bb", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000992-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000992-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_483", "md5_hash": "217ce4e9afcc0945fb2f61199cf8a86c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "60664338dca5fe80e336a7a1c542acd24e9c156d", "sha256_hash": "07ded26e49bbbe899113817de413c6f757bc62674a04396980f231539f4c09b3", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000993-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000993-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_484", "md5_hash": "77d8fe4ee64fc3eb68e1551e4c8531a9", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "738709e7f24d3159418e3e0e7454bedca8199436", "sha256_hash": "d06f8652e531eb3e9786919736b438f0b151bde9f3e9c856ce799be6eeaf8e53", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000994-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000994-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_485", "md5_hash": "6623b78d2fbe38f22085cd7a5ce5dc7e", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c128b74b51c87c95592dad0cf2db21eae7c493bc", "sha256_hash": "90e0cb2e9a4702ab8795d273699900e26d36fdf077a7b6796f012e13075a7c4c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000995-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000995-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_486", "md5_hash": "5a502b83ed33c3f98d7256c42af2b68d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b853e01d85220e45196f486232b99a8d05f80a4b", "sha256_hash": "be59f320ce739cb714cb8ac0efa737e46768a99fe6a642464e3a7bee5b509794", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000996-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000996-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_487", "md5_hash": "fcbaafb739ce85432e43342e7d24e7d3", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "22b1fd0753e7fb36f8eab9f5523c40d55bd23830", "sha256_hash": "7fc0b159575a371087d1dd8d8ccdf14e47248a909f5f201676aa494812a837b1", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000997-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000997-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_488", "md5_hash": "c348f16e54ec4c3c01cc615adf9d81ac", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1ab2a8d5c3e680e955678e5058bdde165ebdfc62", "sha256_hash": "f4e93a4081b4f45b2905758d7b94a79a8a551f1ed5ae56dc222b21de44bf0495", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000998-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000998-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_489", "md5_hash": "d9a91a60eee9fbc1e37f92d134e1a0fb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f0dae72bb3907b8c772869462cea3443178a8898", "sha256_hash": "6349c604d215d0f503a0ace30e8181df829238ae83bf6af9fe99a1c57f1db924", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00000999-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00000999-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_490", "md5_hash": "9a9de027cf88ac632baed68a86e312ea", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7d34673f3450794d0852dc9a3842b984f7281566", "sha256_hash": "e56143275678159a1d2383843f95e2af6850e9494867d44e95a42337a64af73f", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001000-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001000-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_491", "md5_hash": "9daf0bdb0f8f68876491ed00074bf5b0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "31e52acc80f8172d80a3a475af73298c9fe2db92", "sha256_hash": "ccb5bafa2b2abfb0ffb432263fa53e3849a1e2d9160579a3c929600a257ed645", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001001-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001001-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_492", "md5_hash": "4cf8784be8083ba80770202a8977daeb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "311ea4886f597c66e00ad1122b031bd8eb416e4f", "sha256_hash": "adaedda775b7ffb5409fe092ca5fb9a235d8da8821da6e6be787187c95f2b10b", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001002-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001002-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_493", "md5_hash": "0ea6d0b3fb8465333257afa5f2dbcfc5", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b536063b9ee5ac5b113b48c9fb4439e3c24e26c9", "sha256_hash": "40cd28fa7ace26a15a26f75a4a56a50b15c210f5e2884a0bdb4711a0032c48ca", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001003-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001003-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_494", "md5_hash": "a94f0f23b35a9a516f41b1d651235a1d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1f95f88879f81b965fbaf662cb72bf4c5b571958", "sha256_hash": "89befc7869332211fa6f30f9bacba82f366785b42e4fbb5bffbddeedc7124fd6", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001004-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001004-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_495", "md5_hash": "36c3c4b77c84bf7f03d053cbf6c2bd92", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "12d389509135ab23922bd30cd694a10353289c72", "sha256_hash": "46eb7be12127fe0c66facb75d18c997c2c4b4815e61da4a7c8e3c453df168857", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001005-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001005-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_496", "md5_hash": "05add5dd5503d7f76a0e284d6d35f159", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b6efbd3a18ce4d3be18daf4eca4d3bae767a7943", "sha256_hash": "01e11b03bc1274c7bf0b80172eb8cb48b3aacef42a8124e21d40ea61a910e468", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001006-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001006-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_497", "md5_hash": "257f1e07839388ae7a7a4834d3866369", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4ceedcc2665fb970b37c04da79913eba675cf5a7", "sha256_hash": "1a07233e6d68f1ac064e0386d7f6ae184c8d2615f64b21a328c5a2832604517d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001007-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001007-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_498", "md5_hash": "030469fe9b76de537794d37dada034ce", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "ca9fdb59a89463e4d5b5e33f52b90964958b4f80", "sha256_hash": "97f1b5ce73342917ff76872834ca4a85d78ce3f70df88d00b1b01a64733d6597", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001008-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001008-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_499", "md5_hash": "23e8f90681d4abcb75bc208021d88d7a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e57b0b826ba2cc87d94761bada26bed3876410e0", "sha256_hash": "ec058de26f1b92b522376388327e446bfba76c8911237afadf0b00cb9a191db8", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001009-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001009-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_500", "md5_hash": "0c09abdc0043ab45d0b6d4202e2f3672", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "009d8823e7f2c2d069d21cce53fc4ae84f974f69", "sha256_hash": "f095b957dabc5c9aa72adf6ee3bfb9001824dd6849a6a380dcfea42c897ff03c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001010-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001010-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_501", "md5_hash": "d0d113247ae6c24a2bd74e5e70d635eb", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4f894cd427d2859a674702b75a3083dd76dc7816", "sha256_hash": "eff01aba70ac2e2bd3a67e77e8919f04cc92741db6d80d89c152e5abeb8ac74c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001011-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001011-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_502", "md5_hash": "bee2ceaf2df0bfd2c500c274b787a249", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "264035783eb6f1d4a2b00f30bdf1231205a018c8", "sha256_hash": "8ee02ab5cd7a503057248926ceaef3cc9cd4c91ec240a75fded989c01589275a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001012-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001012-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_503", "md5_hash": "8f5155ab62d08ebb1ba47a5def6c274c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5c8b8d568f004bf887e4c12981ba35d7a9d48ce9", "sha256_hash": "669c0f47171688aae27401029a1d1ec4f69de32a3fe0ce2ece21ac7841b1a762", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001013-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001013-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_504", "md5_hash": "4eb3a71d48b4bf3ef1cd50e10534246d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "de85d6c5670e815a68abf9361c34d58935285e0d", "sha256_hash": "b6f621276afd2017e3cc29e77b021bd6edcb647a22057636ba0fbb3437992674", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001014-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001014-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_505", "md5_hash": "83ddbff2bd05776257c7e042abc9a3bd", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7adfabdada0f3f6f7fc9a4f3543af38919c13da2", "sha256_hash": "cfe171ac1dbdc5115582e6a1a1247e7c2cbd2f1e1f8cc356df8d6cd62a64a98b", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001015-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001015-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_506", "md5_hash": "3dd956f36b7d7a6463690346ca069fcf", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f41c933fde45463d5bac0530f60448dfeaf5e1f0", "sha256_hash": "3e2e5459af84d1f4781c7ec8675d7497c3b290ef74c7005564017ece04dec2ab", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001016-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001016-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_507", "md5_hash": "b218e81a3018a0a42b3260f27414aeb0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "64b2d6eceeb6af17af10ec129667f7f64268b185", "sha256_hash": "a2c4f09780cf406c7ad39a614572f4997a9e3e8b545c042ff8f1990782b4a95a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001017-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001017-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_508", "md5_hash": "4a698f8f9f35c1487d49510da2b9f2d6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9653c9ca3678bf99bc442e67e3639f8e2ef900b0", "sha256_hash": "3c6ffd04852aee16123b69ea98079760340cb4a6872faa6ce63ceb22682e691d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001018-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001018-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_509", "md5_hash": "1fd506669da6aefa0d74a41b1e4ec332", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "a755b2f54bc97e56978a4e004f629c17e6c788a4", "sha256_hash": "2c5f0f310b5e06ce5291e7b9046a416322295189927ab29b8237429ebe18800a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001019-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001019-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_510", "md5_hash": "07cd2f6cc99e641548b307db30d8dfde", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "29922f7fe893e63e658e4e812b3a51e8e34ce73b", "sha256_hash": "875c6f18e3748b62e896482032fc8406acdb229c9582766662b612588220c8c5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001020-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001020-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_511", "md5_hash": "55e6806c2afff65fce48ce42e6daddba", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "551292418bf0ce7936c7b018f950a376cd77bb38", "sha256_hash": "167db35b094b798fc73487fad385db0d3b8c4262d84fd5295a6d55d0e86b0c5c", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001021-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001021-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_512", "md5_hash": "149b5ca6013596db20d8145271c41292", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "4f630d3412843159a78c27ce830c6ddefd5bd845", "sha256_hash": "52bcc0e852af06bf52fe7c4a9dc8f957c94b9aa3851539a72018e5f1eadc514d", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001022-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001022-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_513", "md5_hash": "5da14439915b08ebe1cb08a663647010", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "97920d42a5639309993ea35711addcaf1d755852", "sha256_hash": "6e1b3bc55f311bde44b6cf93362be9a725e5b0eca700f46d58044fcf3258b3d9", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001023-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001023-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_514", "md5_hash": "7c690bf9bff4c3f8669291fb1706b066", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "b53c43f318e20a022602302cec2c3a9e7961fbb6", "sha256_hash": "86cf08bd0ca84fd41427799a5d92d8b381260264ab6091ba2ea08b89c5fe6d2a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001024-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001024-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_515", "md5_hash": "9257bb53c537383a8f24f7b74470c0d0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f8a3655f5e99aa4e2f5111093b4b3ce58186ad7c", "sha256_hash": "690736bff2436dd4f3d7815bd449f76d508634615c4014547e4db76478af0c80", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001025-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001025-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_516", "md5_hash": "1067c0a605f841e1a9bbca847d04a433", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1f4e8fa796552775a7eb24725e6cb4a25ee4ff91", "sha256_hash": "c60aa41988bf5c0aca1c64bceada06fd7684d7aaf7fb2eadca05c530ffc61894", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001026-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001026-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_517", "md5_hash": "98aff654d7636849bd7a0dcb5e2cde22", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "68c205b795783b719d683e5f14afe5f7fe3228a4", "sha256_hash": "2948a8e222ccb855ec8dffff0c25e0217d32d9ac920057719106e1758e69210e", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001027-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001027-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_518", "md5_hash": "0f350d39c60e6f4f5d00e05aa41d13b5", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "9872c024c351f5ca76233e6949bf441a1c5fd749", "sha256_hash": "1733c771a9894a09e107090a580e410e5757aaa471d64c7e1fefae3825873f0a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001028-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001028-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_519", "md5_hash": "c24b40c444642270f362f12d527db546", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "191896761f6f0eac4d8baad372af26e9d3cd239d", "sha256_hash": "5efaf9065dded0b04e51a5f758f7d1ba375735af346cc69f4327348a1b308446", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001029-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001029-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_520", "md5_hash": "63a2fc2e8b161ffa7f0d55b06c76416d", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "1415f739121f4cf81d552da14040656dc8deec34", "sha256_hash": "306e3e04c41db0f1bcd603cf56fb528cfa1c1b693887c16e3ae0a8f16d4b47a5", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001030-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001030-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_521", "md5_hash": "3ab6ef31a76ce9100bea221ae16a2fb0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "28f692fdd888b38b1851079b3bdf696478439d5b", "sha256_hash": "935ae85f712ad8f4204d77827079191881e95fda9a2470f1f97498d8d0ab8158", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001031-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001031-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_522", "md5_hash": "ff9b70d7b54898ff02c4f3a805172ec6", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c7469cf1d3f418f629e5752b1ecfe92d24c05444", "sha256_hash": "298cb7866d6f61389d34223ce1ce8f510254fa33d4d99c940396786075b30184", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001032-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001032-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_523", "md5_hash": "9e14397dec9bf9e9eec5546fa14f3f35", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d216ef9b363f1496ee530d31cccedfdc9667adfa", "sha256_hash": "50ebca64511bb5a138019a19206d419333e85567d506c0851530523173410d23", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001033-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001033-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_524", "md5_hash": "1345557b4ab099a7384fed2fac91572a", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "53545dd602b379d3882a33f0cd980a705ece5b40", "sha256_hash": "a8d1cda9a39a561ee68a8fc51c0dc1acbed065ee28eaa99a9e13785c069877ff", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001034-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001034-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_525", "md5_hash": "948697e11ff8b0efb0fb05453ccfac45", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "e01be92978cc40180c6840078eee152b23baeff2", "sha256_hash": "d9a46f2985a6f9056721662f24658eca47c5ac03b7f859585599213d4d573332", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001035-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001035-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_526", "md5_hash": "fd3940322aaabcfbb0a5e7d8bc514fdc", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "606f12f1d37fdf2ba69fd3e80ae59c607c8ab1fa", "sha256_hash": "12984aa5a84632f13074dd82971d7b44dc8a807502739d61bdfe1514004e26bc", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001036-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001036-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_527", "md5_hash": "aea1af0425993c39bdb276da7eb63837", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "8cdb2783138c7ce3d1c3e3d7cc2d90690ebe265a", "sha256_hash": "47ab2ca1966761331dba7fd6f5af9818d0fa7a3846d89c474dbd2a09270ea872", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001037-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001037-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_528", "md5_hash": "3e378c6a008b91b660e78505f6fbd72f", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "c66716618c8aeb23ec4b910f390bea99008787b7", "sha256_hash": "fae8f6d129f05b7f5644cacf14c4efa2b46bd448556af8e89e2bd2ba90a892bf", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001038-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001038-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_529", "md5_hash": "d131df74defb87a64d1740d1b1233a4c", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "7c860124158181e8e733ab450771b9aabb2e7373", "sha256_hash": "547df88ab00c4632be92712dc113176fbce4221aaffe86a9d1e9afdb96486bf2", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001039-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001039-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_530", "md5_hash": "082c55e0379d673e4ac5326e654fc14b", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "5d321f774eeddf2632a05466b72445bfbee399fe", "sha256_hash": "fd4aa340464fdb63f1d0b4799aa26e1330a0ecadc99533f3a660a2472538338a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001040-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001040-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_531", "md5_hash": "3501d12b4bd8519c4b305f7cbec01811", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "d879973b148b3cee70e98a0fecc480c929f06339", "sha256_hash": "f021d224d1751f5c7506c4746016b3c0dae74b1c1384d9db89fc8a734f31b45a", "size": 4096, "type": "process_dump", "version": 1 }, { "archive_path": "process_dumps/process_00000003-region_00001041-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "filename": "process_00000003-region_00001041-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "id": "proc_dump_532", "md5_hash": "3d9ca03e874a134f89caee891978a6d0", "ref_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "process", "type": "reference", "version": 1 }, "sha1_hash": "f212764b68fe2f54a59b1a49b04192837e1aa550", "sha256_hash": "1ca109804b574bdfdb09cb8dcd8b1ccb12b4c8dc22b95df43faf39bbf4b07ca1", "size": 4096, "type": "process_dump", "version": 1 } ], "processes": [ { "cmd_line": "\"C:\\Program Files (x86)\\Microsoft Office\\Office12\\EXCEL.EXE\"", "filename": "c:\\program files (x86)\\microsoft office\\office12\\excel.exe", "id": "proc_1", "image_name": "excel.exe", "monitor_reason": "analysis_target", "monitored_id": 1, "origin_monitor_id": 0, "ref_parent_process": null, "regions": [ { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 65536, "start_va": 65536, "type": "region", "version": 1 }, "end_va": 131071, "entry_point": 0, "filename": null, "id": "region_135", "name": "pagefile_0x0000000000010000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 65536, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 12288, "start_va": 131072, "type": "region", "version": 1 }, "end_va": 143359, "entry_point": 0, "filename": null, "id": "region_136", "name": "pagefile_0x0000000000020000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 131072, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000137-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_23", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 196608, "type": "region", "version": 1 }, "end_va": 200703, "entry_point": 0, "filename": null, "id": "region_137", "name": "private_0x0000000000030000", "norm_filename": null, "region_type": "private_memory", "start_va": 196608, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 4096, "start_va": 262144, "type": "region", "version": 1 }, "end_va": 266239, "entry_point": 262144, "filename": "\\Windows\\System32\\apisetschema.dll", "id": "region_138", "name": "apisetschema.dll", "norm_filename": "c:\\windows\\system32\\apisetschema.dll", "region_type": "memory_mapped_file", "start_va": 262144, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16384, "start_va": 327680, "type": "region", "version": 1 }, "end_va": 344063, "entry_point": 0, "filename": null, "id": "region_139", "name": "pagefile_0x0000000000050000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 327680, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 393216, "type": "region", "version": 1 }, "end_va": 397311, "entry_point": 0, "filename": null, "id": "region_140", "name": "pagefile_0x0000000000060000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 393216, "timestamp": "00:01:35.356", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000141-addr_0x0000000000070000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_24", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 458752, "type": "region", "version": 1 }, "end_va": 462847, "entry_point": 0, "filename": null, "id": "region_141", "name": "private_0x0000000000070000", "norm_filename": null, "region_type": "private_memory", "start_va": 458752, "timestamp": "00:01:35.357", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 12288, "start_va": 524288, "type": "region", "version": 1 }, "end_va": 536575, "entry_point": 0, "filename": null, "id": "region_142", "name": "pagefile_0x0000000000080000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 524288, "timestamp": "00:01:35.357", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000143-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_25", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 589824, "type": "region", "version": 1 }, "end_va": 1638399, "entry_point": 0, "filename": null, "id": "region_143", "name": "private_0x0000000000090000", "norm_filename": null, "region_type": "private_memory", "start_va": 589824, "timestamp": "00:01:35.357", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000144-addr_0x0000000000190000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_26", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 1638400, "type": "region", "version": 1 }, "end_va": 1900543, "entry_point": 0, "filename": null, "id": "region_144", "name": "private_0x0000000000190000", "norm_filename": null, "region_type": "private_memory", "start_va": 1638400, "timestamp": "00:01:35.357", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 421888, "start_va": 1900544, "type": "region", "version": 1 }, "end_va": 2322431, "entry_point": 1900544, "filename": "\\Windows\\System32\\locale.nls", "id": "region_145", "name": "locale.nls", "norm_filename": "c:\\windows\\system32\\locale.nls", "region_type": "memory_mapped_file", "start_va": 1900544, "timestamp": "00:01:35.357", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000146-addr_0x0000000000240000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_27", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 2359296, "type": "region", "version": 1 }, "end_va": 2375679, "entry_point": 0, "filename": null, "id": "region_146", "name": "private_0x0000000000240000", "norm_filename": null, "region_type": "private_memory", "start_va": 2359296, "timestamp": "00:01:35.358", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000147-addr_0x0000000000250000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_28", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2424832, "type": "region", "version": 1 }, "end_va": 2490367, "entry_point": 0, "filename": null, "id": "region_147", "name": "private_0x0000000000250000", "norm_filename": null, "region_type": "private_memory", "start_va": 2424832, "timestamp": "00:01:35.359", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000148-addr_0x0000000000260000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_29", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2490368, "type": "region", "version": 1 }, "end_va": 2555903, "entry_point": 0, "filename": null, "id": "region_148", "name": "private_0x0000000000260000", "norm_filename": null, "region_type": "private_memory", "start_va": 2490368, "timestamp": "00:01:35.359", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000149-addr_0x0000000000270000-size_0x0000000000018000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_30", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 98304, "start_va": 2555904, "type": "region", "version": 1 }, "end_va": 2654207, "entry_point": 0, "filename": null, "id": "region_149", "name": "private_0x0000000000270000", "norm_filename": null, "region_type": "private_memory", "start_va": 2555904, "timestamp": "00:01:35.360", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000150-addr_0x0000000000290000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_31", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2686976, "type": "region", "version": 1 }, "end_va": 2691071, "entry_point": 0, "filename": null, "id": "region_150", "name": "private_0x0000000000290000", "norm_filename": null, "region_type": "private_memory", "start_va": 2686976, "timestamp": "00:01:35.360", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000151-addr_0x00000000002a0000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_32", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2752512, "type": "region", "version": 1 }, "end_va": 2818047, "entry_point": 0, "filename": null, "id": "region_151", "name": "private_0x00000000002a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2752512, "timestamp": "00:01:35.360", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000152-addr_0x00000000002b0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_33", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2818048, "type": "region", "version": 1 }, "end_va": 2883583, "entry_point": 0, "filename": null, "id": "region_152", "name": "private_0x00000000002b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2818048, "timestamp": "00:01:35.360", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000153-addr_0x00000000002c0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_34", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2883584, "type": "region", "version": 1 }, "end_va": 2949119, "entry_point": 0, "filename": null, "id": "region_153", "name": "private_0x00000000002c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2883584, "timestamp": "00:01:35.364", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000154-addr_0x00000000002d0000-size_0x0000000000080000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_35", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 524288, "start_va": 2949120, "type": "region", "version": 1 }, "end_va": 3473407, "entry_point": 0, "filename": null, "id": "region_154", "name": "private_0x00000000002d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2949120, "timestamp": "00:01:35.364", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000155-addr_0x0000000000350000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_36", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3473408, "type": "region", "version": 1 }, "end_va": 3538943, "entry_point": 0, "filename": null, "id": "region_155", "name": "private_0x0000000000350000", "norm_filename": null, "region_type": "private_memory", "start_va": 3473408, "timestamp": "00:01:35.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000156-addr_0x0000000000360000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_37", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3538944, "type": "region", "version": 1 }, "end_va": 3604479, "entry_point": 0, "filename": null, "id": "region_156", "name": "private_0x0000000000360000", "norm_filename": null, "region_type": "private_memory", "start_va": 3538944, "timestamp": "00:01:35.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000157-addr_0x0000000000370000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_38", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3604480, "type": "region", "version": 1 }, "end_va": 3670015, "entry_point": 0, "filename": null, "id": "region_157", "name": "private_0x0000000000370000", "norm_filename": null, "region_type": "private_memory", "start_va": 3604480, "timestamp": "00:01:35.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000158-addr_0x0000000000380000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_39", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3670016, "type": "region", "version": 1 }, "end_va": 3735551, "entry_point": 0, "filename": null, "id": "region_158", "name": "private_0x0000000000380000", "norm_filename": null, "region_type": "private_memory", "start_va": 3670016, "timestamp": "00:01:35.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000159-addr_0x0000000000390000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_40", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3735552, "type": "region", "version": 1 }, "end_va": 3801087, "entry_point": 0, "filename": null, "id": "region_159", "name": "private_0x0000000000390000", "norm_filename": null, "region_type": "private_memory", "start_va": 3735552, "timestamp": "00:01:35.366", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000160-addr_0x00000000003a0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_41", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3801088, "type": "region", "version": 1 }, "end_va": 3866623, "entry_point": 0, "filename": null, "id": "region_160", "name": "private_0x00000000003a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3801088, "timestamp": "00:01:35.366", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000161-addr_0x00000000003b0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_42", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3866624, "type": "region", "version": 1 }, "end_va": 3932159, "entry_point": 0, "filename": null, "id": "region_161", "name": "private_0x00000000003b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3866624, "timestamp": "00:01:35.366", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000162-addr_0x00000000003c0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_43", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3932160, "type": "region", "version": 1 }, "end_va": 3997695, "entry_point": 0, "filename": null, "id": "region_162", "name": "private_0x00000000003c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3932160, "timestamp": "00:01:35.367", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000163-addr_0x00000000003d0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_44", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 3997696, "type": "region", "version": 1 }, "end_va": 4063231, "entry_point": 0, "filename": null, "id": "region_163", "name": "private_0x00000000003d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3997696, "timestamp": "00:01:35.367", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000164-addr_0x00000000003e0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_45", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 4063232, "type": "region", "version": 1 }, "end_va": 4128767, "entry_point": 0, "filename": null, "id": "region_164", "name": "private_0x00000000003e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4063232, "timestamp": "00:01:35.367", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000165-addr_0x00000000003f0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_46", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4194303, "entry_point": 0, "filename": null, "id": "region_165", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:01:35.367", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000166-addr_0x0000000000400000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_47", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 4194304, "type": "region", "version": 1 }, "end_va": 4259839, "entry_point": 0, "filename": null, "id": "region_166", "name": "private_0x0000000000400000", "norm_filename": null, "region_type": "private_memory", "start_va": 4194304, "timestamp": "00:01:35.368", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 4259840, "type": "region", "version": 1 }, "end_va": 4268031, "entry_point": 0, "filename": null, "id": "region_167", "name": "pagefile_0x0000000000410000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 4259840, "timestamp": "00:01:35.368", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000168-addr_0x0000000000420000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_48", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 4325376, "type": "region", "version": 1 }, "end_va": 4390911, "entry_point": 0, "filename": null, "id": "region_168", "name": "private_0x0000000000420000", "norm_filename": null, "region_type": "private_memory", "start_va": 4325376, "timestamp": "00:01:35.368", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000169-addr_0x0000000000430000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_49", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 4390912, "type": "region", "version": 1 }, "end_va": 4456447, "entry_point": 0, "filename": null, "id": "region_169", "name": "private_0x0000000000430000", "norm_filename": null, "region_type": "private_memory", "start_va": 4390912, "timestamp": "00:01:35.368", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 4456448, "type": "region", "version": 1 }, "end_va": 4464639, "entry_point": 0, "filename": null, "id": "region_170", "name": "pagefile_0x0000000000440000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 4456448, "timestamp": "00:01:35.368", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000171-addr_0x0000000000450000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_50", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 4521984, "type": "region", "version": 1 }, "end_va": 5570559, "entry_point": 0, "filename": null, "id": "region_171", "name": "private_0x0000000000450000", "norm_filename": null, "region_type": "private_memory", "start_va": 4521984, "timestamp": "00:01:35.369", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1605632, "start_va": 5570560, "type": "region", "version": 1 }, "end_va": 7176191, "entry_point": 0, "filename": null, "id": "region_172", "name": "pagefile_0x0000000000550000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 5570560, "timestamp": "00:01:35.369", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1576960, "start_va": 7208960, "type": "region", "version": 1 }, "end_va": 8785919, "entry_point": 0, "filename": null, "id": "region_173", "name": "pagefile_0x00000000006e0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 7208960, "timestamp": "00:01:35.369", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 20971520, "start_va": 8847360, "type": "region", "version": 1 }, "end_va": 29818879, "entry_point": 0, "filename": null, "id": "region_174", "name": "pagefile_0x0000000000870000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 8847360, "timestamp": "00:01:35.369", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1744896, "start_va": 29818880, "type": "region", "version": 1 }, "end_va": 31563775, "entry_point": 29818880, "filename": "\\Program Files (x86)\\Microsoft Office\\Office12\\1033\\XLINTL32.DLL", "id": "region_175", "name": "xlintl32.dll", "norm_filename": "c:\\program files (x86)\\microsoft office\\office12\\1033\\xlintl32.dll", "region_type": "memory_mapped_file", "start_va": 29818880, "timestamp": "00:01:35.370", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000176-addr_0x0000000001e20000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_51", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 31588352, "type": "region", "version": 1 }, "end_va": 31653887, "entry_point": 0, "filename": null, "id": "region_176", "name": "private_0x0000000001e20000", "norm_filename": null, "region_type": "private_memory", "start_va": 31588352, "timestamp": "00:01:35.379", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000177-addr_0x0000000001e30000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_52", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 31653888, "type": "region", "version": 1 }, "end_va": 31719423, "entry_point": 0, "filename": null, "id": "region_177", "name": "private_0x0000000001e30000", "norm_filename": null, "region_type": "private_memory", "start_va": 31653888, "timestamp": "00:01:35.380", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000178-addr_0x0000000001e40000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_53", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 31719424, "type": "region", "version": 1 }, "end_va": 31784959, "entry_point": 0, "filename": null, "id": "region_178", "name": "private_0x0000000001e40000", "norm_filename": null, "region_type": "private_memory", "start_va": 31719424, "timestamp": "00:01:35.380", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 2334720, "start_va": 31784960, "type": "region", "version": 1 }, "end_va": 34119679, "entry_point": 31784960, "filename": "\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE12\\Cultures\\OFFICE.ODF", "id": "region_179", "name": "office.odf", "norm_filename": "c:\\program files (x86)\\common files\\microsoft shared\\office12\\cultures\\office.odf", "region_type": "memory_mapped_file", "start_va": 31784960, "timestamp": "00:01:35.380", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000180-addr_0x0000000002090000-size_0x0000000000020000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_54", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 131072, "start_va": 34144256, "type": "region", "version": 1 }, "end_va": 34275327, "entry_point": 0, "filename": null, "id": "region_180", "name": "private_0x0000000002090000", "norm_filename": null, "region_type": "private_memory", "start_va": 34144256, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 34275328, "type": "region", "version": 1 }, "end_va": 34279423, "entry_point": 0, "filename": null, "id": "region_181", "name": "pagefile_0x00000000020b0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 34275328, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 34340864, "type": "region", "version": 1 }, "end_va": 34344959, "entry_point": 0, "filename": null, "id": "region_182", "name": "pagefile_0x00000000020c0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 34340864, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000183-addr_0x00000000020d0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_55", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 34406400, "type": "region", "version": 1 }, "end_va": 34668543, "entry_point": 0, "filename": null, "id": "region_183", "name": "private_0x00000000020d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 34406400, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000184-addr_0x0000000002110000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_56", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 34668544, "type": "region", "version": 1 }, "end_va": 34930687, "entry_point": 0, "filename": null, "id": "region_184", "name": "private_0x0000000002110000", "norm_filename": null, "region_type": "private_memory", "start_va": 34668544, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 913408, "start_va": 34930688, "type": "region", "version": 1 }, "end_va": 35844095, "entry_point": 0, "filename": null, "id": "region_185", "name": "pagefile_0x0000000002150000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 34930688, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 2945024, "start_va": 35848192, "type": "region", "version": 1 }, "end_va": 38793215, "entry_point": 35848192, "filename": "\\Windows\\Globalization\\Sorting\\SortDefault.nls", "id": "region_186", "name": "sortdefault.nls", "norm_filename": "c:\\windows\\globalization\\sorting\\sortdefault.nls", "region_type": "memory_mapped_file", "start_va": 35848192, "timestamp": "00:01:35.381", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000187-addr_0x0000000002500000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_57", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 38797312, "type": "region", "version": 1 }, "end_va": 38801407, "entry_point": 0, "filename": null, "id": "region_187", "name": "private_0x0000000002500000", "norm_filename": null, "region_type": "private_memory", "start_va": 38797312, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 38862848, "type": "region", "version": 1 }, "end_va": 38866943, "entry_point": 0, "filename": null, "id": "region_188", "name": "pagefile_0x0000000002510000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 38862848, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 38928384, "type": "region", "version": 1 }, "end_va": 38932479, "entry_point": 0, "filename": null, "id": "region_189", "name": "pagefile_0x0000000002520000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 38928384, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000190-addr_0x0000000002530000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_58", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 38993920, "type": "region", "version": 1 }, "end_va": 39059455, "entry_point": 0, "filename": null, "id": "region_190", "name": "private_0x0000000002530000", "norm_filename": null, "region_type": "private_memory", "start_va": 38993920, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000191-addr_0x0000000002540000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_59", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 39059456, "type": "region", "version": 1 }, "end_va": 39124991, "entry_point": 0, "filename": null, "id": "region_191", "name": "private_0x0000000002540000", "norm_filename": null, "region_type": "private_memory", "start_va": 39059456, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000192-addr_0x0000000002550000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_60", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 39124992, "type": "region", "version": 1 }, "end_va": 39190527, "entry_point": 0, "filename": null, "id": "region_192", "name": "private_0x0000000002550000", "norm_filename": null, "region_type": "private_memory", "start_va": 39124992, "timestamp": "00:01:35.382", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000193-addr_0x0000000002560000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_61", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 39190528, "type": "region", "version": 1 }, "end_va": 39256063, "entry_point": 0, "filename": null, "id": "region_193", "name": "private_0x0000000002560000", "norm_filename": null, "region_type": "private_memory", "start_va": 39190528, "timestamp": "00:01:35.383", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000194-addr_0x0000000002570000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_62", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 39256064, "type": "region", "version": 1 }, "end_va": 39518207, "entry_point": 0, "filename": null, "id": "region_194", "name": "private_0x0000000002570000", "norm_filename": null, "region_type": "private_memory", "start_va": 39256064, "timestamp": "00:01:35.383", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 9633792, "start_va": 39518208, "type": "region", "version": 1 }, "end_va": 49151999, "entry_point": 39518208, "filename": "\\Windows\\Fonts\\StaticCache.dat", "id": "region_195", "name": "staticcache.dat", "norm_filename": "c:\\windows\\fonts\\staticcache.dat", "region_type": "memory_mapped_file", "start_va": 39518208, "timestamp": "00:01:35.383", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000196-addr_0x0000000002ee0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_63", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 49152000, "type": "region", "version": 1 }, "end_va": 49217535, "entry_point": 0, "filename": null, "id": "region_196", "name": "private_0x0000000002ee0000", "norm_filename": null, "region_type": "private_memory", "start_va": 49152000, "timestamp": "00:01:35.384", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000197-addr_0x0000000002ef0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_64", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 49217536, "type": "region", "version": 1 }, "end_va": 49283071, "entry_point": 0, "filename": null, "id": "region_197", "name": "private_0x0000000002ef0000", "norm_filename": null, "region_type": "private_memory", "start_va": 49217536, "timestamp": "00:01:35.384", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000198-addr_0x0000000002f00000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_65", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 49283072, "type": "region", "version": 1 }, "end_va": 49545215, "entry_point": 0, "filename": null, "id": "region_198", "name": "private_0x0000000002f00000", "norm_filename": null, "region_type": "private_memory", "start_va": 49283072, "timestamp": "00:01:35.384", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000199-addr_0x0000000002f40000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_66", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 49545216, "type": "region", "version": 1 }, "end_va": 49549311, "entry_point": 0, "filename": null, "id": "region_199", "name": "private_0x0000000002f40000", "norm_filename": null, "region_type": "private_memory", "start_va": 49545216, "timestamp": "00:01:35.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 28672, "start_va": 49610752, "type": "region", "version": 1 }, "end_va": 49639423, "entry_point": 0, "filename": null, "id": "region_200", "name": "pagefile_0x0000000002f50000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 49610752, "timestamp": "00:01:35.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 8192, "start_va": 49676288, "type": "region", "version": 1 }, "end_va": 49684479, "entry_point": 0, "filename": null, "id": "region_201", "name": "pagefile_0x0000000002f60000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 49676288, "timestamp": "00:01:35.385", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000202-addr_0x0000000002f70000-size_0x0000000000001000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_67", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 49741824, "type": "region", "version": 1 }, "end_va": 49745919, "entry_point": 0, "filename": null, "id": "region_202", "name": "private_0x0000000002f70000", "norm_filename": null, "region_type": "private_memory", "start_va": 49741824, "timestamp": "00:01:35.385", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000203-addr_0x0000000002f80000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_68", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 49807360, "type": "region", "version": 1 }, "end_va": 50069503, "entry_point": 0, "filename": null, "id": "region_203", "name": "private_0x0000000002f80000", "norm_filename": null, "region_type": "private_memory", "start_va": 49807360, "timestamp": "00:01:35.385", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000204-addr_0x0000000002fc0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_69", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 50069504, "type": "region", "version": 1 }, "end_va": 50135039, "entry_point": 0, "filename": null, "id": "region_204", "name": "private_0x0000000002fc0000", "norm_filename": null, "region_type": "private_memory", "start_va": 50069504, "timestamp": "00:01:35.386", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000205-addr_0x0000000002fd0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_70", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 50135040, "type": "region", "version": 1 }, "end_va": 50200575, "entry_point": 0, "filename": null, "id": "region_205", "name": "private_0x0000000002fd0000", "norm_filename": null, "region_type": "private_memory", "start_va": 50135040, "timestamp": "00:01:35.386", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000206-addr_0x0000000002fe0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_71", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 50200576, "type": "region", "version": 1 }, "end_va": 51249151, "entry_point": 0, "filename": null, "id": "region_206", "name": "private_0x0000000002fe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 50200576, "timestamp": "00:01:35.386", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000207-addr_0x00000000030e0000-size_0x0000000000080000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_72", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 524288, "start_va": 51249152, "type": "region", "version": 1 }, "end_va": 51773439, "entry_point": 0, "filename": null, "id": "region_207", "name": "private_0x00000000030e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 51249152, "timestamp": "00:01:35.386", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000208-addr_0x0000000003160000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_73", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 51773440, "type": "region", "version": 1 }, "end_va": 52822015, "entry_point": 0, "filename": null, "id": "region_208", "name": "private_0x0000000003160000", "norm_filename": null, "region_type": "private_memory", "start_va": 51773440, "timestamp": "00:01:35.387", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000209-addr_0x0000000003260000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_74", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 52822016, "type": "region", "version": 1 }, "end_va": 52887551, "entry_point": 0, "filename": null, "id": "region_209", "name": "private_0x0000000003260000", "norm_filename": null, "region_type": "private_memory", "start_va": 52822016, "timestamp": "00:01:35.387", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000210-addr_0x0000000003270000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_75", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 52887552, "type": "region", "version": 1 }, "end_va": 52953087, "entry_point": 0, "filename": null, "id": "region_210", "name": "private_0x0000000003270000", "norm_filename": null, "region_type": "private_memory", "start_va": 52887552, "timestamp": "00:01:35.387", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000211-addr_0x0000000003280000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_76", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 52953088, "type": "region", "version": 1 }, "end_va": 54001663, "entry_point": 0, "filename": null, "id": "region_211", "name": "private_0x0000000003280000", "norm_filename": null, "region_type": "private_memory", "start_va": 52953088, "timestamp": "00:01:35.388", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000212-addr_0x0000000003380000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_77", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54001664, "type": "region", "version": 1 }, "end_va": 54067199, "entry_point": 0, "filename": null, "id": "region_212", "name": "private_0x0000000003380000", "norm_filename": null, "region_type": "private_memory", "start_va": 54001664, "timestamp": "00:01:35.388", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000213-addr_0x0000000003390000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_78", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54067200, "type": "region", "version": 1 }, "end_va": 54132735, "entry_point": 0, "filename": null, "id": "region_213", "name": "private_0x0000000003390000", "norm_filename": null, "region_type": "private_memory", "start_va": 54067200, "timestamp": "00:01:35.388", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000214-addr_0x00000000033a0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_79", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54132736, "type": "region", "version": 1 }, "end_va": 54198271, "entry_point": 0, "filename": null, "id": "region_214", "name": "private_0x00000000033a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54132736, "timestamp": "00:01:35.388", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000215-addr_0x00000000033b0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_80", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54198272, "type": "region", "version": 1 }, "end_va": 54263807, "entry_point": 0, "filename": null, "id": "region_215", "name": "private_0x00000000033b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54198272, "timestamp": "00:01:35.389", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000216-addr_0x00000000033c0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_81", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54263808, "type": "region", "version": 1 }, "end_va": 54329343, "entry_point": 0, "filename": null, "id": "region_216", "name": "private_0x00000000033c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54263808, "timestamp": "00:01:35.389", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000217-addr_0x00000000033d0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_82", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54329344, "type": "region", "version": 1 }, "end_va": 54394879, "entry_point": 0, "filename": null, "id": "region_217", "name": "private_0x00000000033d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54329344, "timestamp": "00:01:35.389", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000218-addr_0x00000000033e0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_83", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54394880, "type": "region", "version": 1 }, "end_va": 54460415, "entry_point": 0, "filename": null, "id": "region_218", "name": "private_0x00000000033e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54394880, "timestamp": "00:01:35.389", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000219-addr_0x00000000033f0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_84", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54460416, "type": "region", "version": 1 }, "end_va": 54525951, "entry_point": 0, "filename": null, "id": "region_219", "name": "private_0x00000000033f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 54460416, "timestamp": "00:01:35.390", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000220-addr_0x0000000003400000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_85", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54525952, "type": "region", "version": 1 }, "end_va": 54591487, "entry_point": 0, "filename": null, "id": "region_220", "name": "private_0x0000000003400000", "norm_filename": null, "region_type": "private_memory", "start_va": 54525952, "timestamp": "00:01:35.390", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000221-addr_0x0000000003410000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_86", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 54591488, "type": "region", "version": 1 }, "end_va": 54599679, "entry_point": 0, "filename": null, "id": "region_221", "name": "private_0x0000000003410000", "norm_filename": null, "region_type": "private_memory", "start_va": 54591488, "timestamp": "00:01:35.392", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000222-addr_0x0000000003420000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_87", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 54657024, "type": "region", "version": 1 }, "end_va": 54722559, "entry_point": 0, "filename": null, "id": "region_222", "name": "private_0x0000000003420000", "norm_filename": null, "region_type": "private_memory", "start_va": 54657024, "timestamp": "00:01:35.392", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000223-addr_0x0000000003430000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_88", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 54722560, "type": "region", "version": 1 }, "end_va": 55771135, "entry_point": 0, "filename": null, "id": "region_223", "name": "private_0x0000000003430000", "norm_filename": null, "region_type": "private_memory", "start_va": 54722560, "timestamp": "00:01:35.393", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000224-addr_0x0000000003530000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_89", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 55771136, "type": "region", "version": 1 }, "end_va": 55775231, "entry_point": 0, "filename": null, "id": "region_224", "name": "private_0x0000000003530000", "norm_filename": null, "region_type": "private_memory", "start_va": 55771136, "timestamp": "00:01:35.393", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000225-addr_0x0000000003540000-size_0x0000000000006000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_90", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 24576, "start_va": 55836672, "type": "region", "version": 1 }, "end_va": 55861247, "entry_point": 0, "filename": null, "id": "region_225", "name": "private_0x0000000003540000", "norm_filename": null, "region_type": "private_memory", "start_va": 55836672, "timestamp": "00:01:35.393", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000226-addr_0x0000000003550000-size_0x000000000000f000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_91", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 61440, "start_va": 55902208, "type": "region", "version": 1 }, "end_va": 55963647, "entry_point": 0, "filename": null, "id": "region_226", "name": "private_0x0000000003550000", "norm_filename": null, "region_type": "private_memory", "start_va": 55902208, "timestamp": "00:01:35.393", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000227-addr_0x0000000003560000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_92", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 55967744, "type": "region", "version": 1 }, "end_va": 55971839, "entry_point": 0, "filename": null, "id": "region_227", "name": "private_0x0000000003560000", "norm_filename": null, "region_type": "private_memory", "start_va": 55967744, "timestamp": "00:01:35.394", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000228-addr_0x0000000003570000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_93", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 56033280, "type": "region", "version": 1 }, "end_va": 56098815, "entry_point": 0, "filename": null, "id": "region_228", "name": "private_0x0000000003570000", "norm_filename": null, "region_type": "private_memory", "start_va": 56033280, "timestamp": "00:01:35.394", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000229-addr_0x0000000003580000-size_0x0000000000040000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_94", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 56098816, "type": "region", "version": 1 }, "end_va": 56360959, "entry_point": 0, "filename": null, "id": "region_229", "name": "private_0x0000000003580000", "norm_filename": null, "region_type": "private_memory", "start_va": 56098816, "timestamp": "00:01:35.395", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000230-addr_0x00000000035c0000-size_0x0000000000009000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_95", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 36864, "start_va": 56360960, "type": "region", "version": 1 }, "end_va": 56397823, "entry_point": 0, "filename": null, "id": "region_230", "name": "private_0x00000000035c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 56360960, "timestamp": "00:01:35.395", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000231-addr_0x00000000035d0000-size_0x0000000000009000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_96", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 36864, "start_va": 56426496, "type": "region", "version": 1 }, "end_va": 56463359, "entry_point": 0, "filename": null, "id": "region_231", "name": "private_0x00000000035d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 56426496, "timestamp": "00:01:35.395", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000232-addr_0x00000000035e0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_97", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 56492032, "type": "region", "version": 1 }, "end_va": 56557567, "entry_point": 0, "filename": null, "id": "region_232", "name": "private_0x00000000035e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 56492032, "timestamp": "00:01:35.396", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000233-addr_0x00000000035f0000-size_0x0000000000009000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_98", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 36864, "start_va": 56557568, "type": "region", "version": 1 }, "end_va": 56594431, "entry_point": 0, "filename": null, "id": "region_233", "name": "private_0x00000000035f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 56557568, "timestamp": "00:01:35.396", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000234-addr_0x0000000003600000-size_0x0000000000040000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_99", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 56623104, "type": "region", "version": 1 }, "end_va": 56885247, "entry_point": 0, "filename": null, "id": "region_234", "name": "private_0x0000000003600000", "norm_filename": null, "region_type": "private_memory", "start_va": 56623104, "timestamp": "00:01:35.396", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4141056, "start_va": 56885248, "type": "region", "version": 1 }, "end_va": 61026303, "entry_point": 0, "filename": null, "id": "region_235", "name": "pagefile_0x0000000003640000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 56885248, "timestamp": "00:01:35.397", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000236-addr_0x0000000003a40000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_100", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61079552, "type": "region", "version": 1 }, "end_va": 61145087, "entry_point": 0, "filename": null, "id": "region_236", "name": "private_0x0000000003a40000", "norm_filename": null, "region_type": "private_memory", "start_va": 61079552, "timestamp": "00:01:35.397", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000237-addr_0x0000000003a50000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_101", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61145088, "type": "region", "version": 1 }, "end_va": 61210623, "entry_point": 0, "filename": null, "id": "region_237", "name": "private_0x0000000003a50000", "norm_filename": null, "region_type": "private_memory", "start_va": 61145088, "timestamp": "00:01:35.398", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000238-addr_0x0000000003a60000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_102", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61210624, "type": "region", "version": 1 }, "end_va": 61276159, "entry_point": 0, "filename": null, "id": "region_238", "name": "private_0x0000000003a60000", "norm_filename": null, "region_type": "private_memory", "start_va": 61210624, "timestamp": "00:01:35.398", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 61276160, "type": "region", "version": 1 }, "end_va": 61280255, "entry_point": 0, "filename": null, "id": "region_239", "name": "pagefile_0x0000000003a70000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 61276160, "timestamp": "00:01:35.398", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000240-addr_0x0000000003a80000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_103", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61341696, "type": "region", "version": 1 }, "end_va": 61407231, "entry_point": 0, "filename": null, "id": "region_240", "name": "private_0x0000000003a80000", "norm_filename": null, "region_type": "private_memory", "start_va": 61341696, "timestamp": "00:01:35.398", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000241-addr_0x0000000003a90000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_104", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61407232, "type": "region", "version": 1 }, "end_va": 61472767, "entry_point": 0, "filename": null, "id": "region_241", "name": "private_0x0000000003a90000", "norm_filename": null, "region_type": "private_memory", "start_va": 61407232, "timestamp": "00:01:35.399", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000242-addr_0x0000000003aa0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_105", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61472768, "type": "region", "version": 1 }, "end_va": 61538303, "entry_point": 0, "filename": null, "id": "region_242", "name": "private_0x0000000003aa0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61472768, "timestamp": "00:01:35.399", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 61538304, "type": "region", "version": 1 }, "end_va": 61542399, "entry_point": 0, "filename": null, "id": "region_243", "name": "pagefile_0x0000000003ab0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 61538304, "timestamp": "00:01:35.399", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000244-addr_0x0000000003ac0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_106", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 61603840, "type": "region", "version": 1 }, "end_va": 61607935, "entry_point": 0, "filename": null, "id": "region_244", "name": "private_0x0000000003ac0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61603840, "timestamp": "00:01:35.400", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000245-addr_0x0000000003ad0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_107", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 61669376, "type": "region", "version": 1 }, "end_va": 61673471, "entry_point": 0, "filename": null, "id": "region_245", "name": "private_0x0000000003ad0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61669376, "timestamp": "00:01:35.400", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000246-addr_0x0000000003ae0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_108", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 61734912, "type": "region", "version": 1 }, "end_va": 61739007, "entry_point": 0, "filename": null, "id": "region_246", "name": "private_0x0000000003ae0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61734912, "timestamp": "00:01:35.400", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000247-addr_0x0000000003af0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_109", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 61800448, "type": "region", "version": 1 }, "end_va": 61804543, "entry_point": 0, "filename": null, "id": "region_247", "name": "private_0x0000000003af0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61800448, "timestamp": "00:01:35.401", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000248-addr_0x0000000003b00000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_110", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 61865984, "type": "region", "version": 1 }, "end_va": 62128127, "entry_point": 0, "filename": null, "id": "region_248", "name": "private_0x0000000003b00000", "norm_filename": null, "region_type": "private_memory", "start_va": 61865984, "timestamp": "00:01:35.401", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000249-addr_0x0000000003b40000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_111", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 62128128, "type": "region", "version": 1 }, "end_va": 62390271, "entry_point": 0, "filename": null, "id": "region_249", "name": "private_0x0000000003b40000", "norm_filename": null, "region_type": "private_memory", "start_va": 62128128, "timestamp": "00:01:35.402", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000250-addr_0x0000000003b80000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_112", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 62390272, "type": "region", "version": 1 }, "end_va": 62652415, "entry_point": 0, "filename": null, "id": "region_250", "name": "private_0x0000000003b80000", "norm_filename": null, "region_type": "private_memory", "start_va": 62390272, "timestamp": "00:01:35.402", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 12288, "start_va": 62652416, "type": "region", "version": 1 }, "end_va": 62664703, "entry_point": 0, "filename": null, "id": "region_251", "name": "pagefile_0x0000000003bc0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 62652416, "timestamp": "00:01:35.402", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000252-addr_0x0000000003bd0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_113", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 62717952, "type": "region", "version": 1 }, "end_va": 62783487, "entry_point": 0, "filename": null, "id": "region_252", "name": "private_0x0000000003bd0000", "norm_filename": null, "region_type": "private_memory", "start_va": 62717952, "timestamp": "00:01:35.402", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000253-addr_0x0000000003be0000-size_0x000000000000c000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_114", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 49152, "start_va": 62783488, "type": "region", "version": 1 }, "end_va": 62832639, "entry_point": 0, "filename": null, "id": "region_253", "name": "private_0x0000000003be0000", "norm_filename": null, "region_type": "private_memory", "start_va": 62783488, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 62849024, "type": "region", "version": 1 }, "end_va": 62857215, "entry_point": 0, "filename": null, "id": "region_254", "name": "pagefile_0x0000000003bf0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 62849024, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 62914560, "type": "region", "version": 1 }, "end_va": 62918655, "entry_point": 0, "filename": null, "id": "region_255", "name": "pagefile_0x0000000003c00000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 62914560, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000256-addr_0x0000000003c10000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_115", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 62980096, "type": "region", "version": 1 }, "end_va": 64028671, "entry_point": 0, "filename": null, "id": "region_256", "name": "private_0x0000000003c10000", "norm_filename": null, "region_type": "private_memory", "start_va": 62980096, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000257-addr_0x0000000003d10000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_116", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 64028672, "type": "region", "version": 1 }, "end_va": 65077247, "entry_point": 0, "filename": null, "id": "region_257", "name": "private_0x0000000003d10000", "norm_filename": null, "region_type": "private_memory", "start_va": 64028672, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000258-addr_0x0000000003e10000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_117", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 65077248, "type": "region", "version": 1 }, "end_va": 66125823, "entry_point": 0, "filename": null, "id": "region_258", "name": "private_0x0000000003e10000", "norm_filename": null, "region_type": "private_memory", "start_va": 65077248, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 66125824, "type": "region", "version": 1 }, "end_va": 66129919, "entry_point": 66125824, "filename": "\\Windows\\SysWOW64\\en-US\\wdmaud.drv.mui", "id": "region_259", "name": "wdmaud.drv.mui", "norm_filename": "c:\\windows\\syswow64\\en-us\\wdmaud.drv.mui", "region_type": "memory_mapped_file", "start_va": 66125824, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 66191360, "type": "region", "version": 1 }, "end_va": 66195455, "entry_point": 66191360, "filename": "\\Windows\\SysWOW64\\en-US\\MMDevAPI.dll.mui", "id": "region_260", "name": "mmdevapi.dll.mui", "norm_filename": "c:\\windows\\syswow64\\en-us\\mmdevapi.dll.mui", "region_type": "memory_mapped_file", "start_va": 66191360, "timestamp": "00:01:35.403", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000261-addr_0x0000000003f30000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_118", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 66256896, "type": "region", "version": 1 }, "end_va": 66265087, "entry_point": 0, "filename": null, "id": "region_261", "name": "private_0x0000000003f30000", "norm_filename": null, "region_type": "private_memory", "start_va": 66256896, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000262-addr_0x0000000003f40000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_119", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 66322432, "type": "region", "version": 1 }, "end_va": 66387967, "entry_point": 0, "filename": null, "id": "region_262", "name": "private_0x0000000003f40000", "norm_filename": null, "region_type": "private_memory", "start_va": 66322432, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "untracked_file_region" ], "info": "No dump was created because mapped file is not tracked", "permissions": [ "readable" ], "ref_process_dump": null, "size": 147456, "start_va": 66387968, "type": "region", "version": 1 }, "end_va": 66535423, "entry_point": 66387968, "filename": "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000d.db", "id": "region_263", "name": "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000d.db", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000d.db", "region_type": "memory_mapped_file", "start_va": 66387968, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 66584576, "type": "region", "version": 1 }, "end_va": 66588671, "entry_point": 0, "filename": null, "id": "region_264", "name": "pagefile_0x0000000003f80000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 66584576, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000265-addr_0x0000000003f90000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_120", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 66650112, "type": "region", "version": 1 }, "end_va": 66912255, "entry_point": 0, "filename": null, "id": "region_265", "name": "private_0x0000000003f90000", "norm_filename": null, "region_type": "private_memory", "start_va": 66650112, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 66912256, "type": "region", "version": 1 }, "end_va": 66920447, "entry_point": 0, "filename": null, "id": "region_266", "name": "pagefile_0x0000000003fd0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 66912256, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 53248, "start_va": 66977792, "type": "region", "version": 1 }, "end_va": 67031039, "entry_point": 66977792, "filename": "\\Windows\\SysWOW64\\en-US\\comdlg32.dll.mui", "id": "region_267", "name": "comdlg32.dll.mui", "norm_filename": "c:\\windows\\syswow64\\en-us\\comdlg32.dll.mui", "region_type": "memory_mapped_file", "start_va": 66977792, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 67043328, "type": "region", "version": 1 }, "end_va": 67051519, "entry_point": 0, "filename": null, "id": "region_268", "name": "pagefile_0x0000000003ff0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 67043328, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8192, "start_va": 67108864, "type": "region", "version": 1 }, "end_va": 67117055, "entry_point": 0, "filename": null, "id": "region_269", "name": "pagefile_0x0000000004000000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 67108864, "timestamp": "00:01:35.404", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000270-addr_0x0000000004010000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_121", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 67174400, "type": "region", "version": 1 }, "end_va": 67178495, "entry_point": 0, "filename": null, "id": "region_270", "name": "private_0x0000000004010000", "norm_filename": null, "region_type": "private_memory", "start_va": 67174400, "timestamp": "00:01:35.405", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000271-addr_0x0000000004020000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_122", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 67239936, "type": "region", "version": 1 }, "end_va": 67252223, "entry_point": 0, "filename": null, "id": "region_271", "name": "private_0x0000000004020000", "norm_filename": null, "region_type": "private_memory", "start_va": 67239936, "timestamp": "00:01:35.405", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000272-addr_0x0000000004030000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_123", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 67305472, "type": "region", "version": 1 }, "end_va": 67317759, "entry_point": 0, "filename": null, "id": "region_272", "name": "private_0x0000000004030000", "norm_filename": null, "region_type": "private_memory", "start_va": 67305472, "timestamp": "00:01:35.405", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000273-addr_0x0000000004040000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_124", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 67371008, "type": "region", "version": 1 }, "end_va": 67633151, "entry_point": 0, "filename": null, "id": "region_273", "name": "private_0x0000000004040000", "norm_filename": null, "region_type": "private_memory", "start_va": 67371008, "timestamp": "00:01:35.405", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000274-addr_0x0000000004080000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_125", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 67633152, "type": "region", "version": 1 }, "end_va": 67645439, "entry_point": 0, "filename": null, "id": "region_274", "name": "private_0x0000000004080000", "norm_filename": null, "region_type": "private_memory", "start_va": 67633152, "timestamp": "00:01:35.406", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000275-addr_0x0000000004090000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_126", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 67698688, "type": "region", "version": 1 }, "end_va": 68747263, "entry_point": 0, "filename": null, "id": "region_275", "name": "private_0x0000000004090000", "norm_filename": null, "region_type": "private_memory", "start_va": 67698688, "timestamp": "00:01:35.406", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000276-addr_0x0000000004190000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_127", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 68747264, "type": "region", "version": 1 }, "end_va": 69795839, "entry_point": 0, "filename": null, "id": "region_276", "name": "private_0x0000000004190000", "norm_filename": null, "region_type": "private_memory", "start_va": 68747264, "timestamp": "00:01:35.406", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000277-addr_0x0000000004290000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_128", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 69795840, "type": "region", "version": 1 }, "end_va": 69799935, "entry_point": 0, "filename": null, "id": "region_277", "name": "private_0x0000000004290000", "norm_filename": null, "region_type": "private_memory", "start_va": 69795840, "timestamp": "00:01:35.407", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000278-addr_0x00000000042a0000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_129", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 69861376, "type": "region", "version": 1 }, "end_va": 69873663, "entry_point": 0, "filename": null, "id": "region_278", "name": "private_0x00000000042a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 69861376, "timestamp": "00:01:35.407", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000279-addr_0x00000000042b0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_130", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 69926912, "type": "region", "version": 1 }, "end_va": 69992447, "entry_point": 0, "filename": null, "id": "region_279", "name": "private_0x00000000042b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 69926912, "timestamp": "00:01:35.407", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000280-addr_0x00000000042c0000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_131", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 69992448, "type": "region", "version": 1 }, "end_va": 70000639, "entry_point": 0, "filename": null, "id": "region_280", "name": "private_0x00000000042c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 69992448, "timestamp": "00:01:35.407", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "untracked_file_region" ], "info": "No dump was created because mapped file is not tracked", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16384, "start_va": 70057984, "type": "region", "version": 1 }, "end_va": 70074367, "entry_point": 70057984, "filename": "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db", "id": "region_281", "name": "cversions.2.db", "norm_filename": "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db", "region_type": "memory_mapped_file", "start_va": 70057984, "timestamp": "00:01:35.407", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000282-addr_0x00000000042e0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_132", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 70123520, "type": "region", "version": 1 }, "end_va": 70127615, "entry_point": 0, "filename": null, "id": "region_282", "name": "private_0x00000000042e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 70123520, "timestamp": "00:01:35.408", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000283-addr_0x00000000042f0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_133", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 70189056, "type": "region", "version": 1 }, "end_va": 70451199, "entry_point": 0, "filename": null, "id": "region_283", "name": "private_0x00000000042f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 70189056, "timestamp": "00:01:35.411", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000284-addr_0x0000000004330000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_134", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 70451200, "type": "region", "version": 1 }, "end_va": 71499775, "entry_point": 0, "filename": null, "id": "region_284", "name": "private_0x0000000004330000", "norm_filename": null, "region_type": "private_memory", "start_va": 70451200, "timestamp": "00:01:35.411", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000285-addr_0x0000000004430000-size_0x0000000000402000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_135", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4202496, "start_va": 71499776, "type": "region", "version": 1 }, "end_va": 75702271, "entry_point": 0, "filename": null, "id": "region_285", "name": "private_0x0000000004430000", "norm_filename": null, "region_type": "private_memory", "start_va": 71499776, "timestamp": "00:01:35.412", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000286-addr_0x0000000004840000-size_0x0000000000012000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_136", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 73728, "start_va": 75759616, "type": "region", "version": 1 }, "end_va": 75833343, "entry_point": 0, "filename": null, "id": "region_286", "name": "private_0x0000000004840000", "norm_filename": null, "region_type": "private_memory", "start_va": 75759616, "timestamp": "00:01:35.412", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000287-addr_0x0000000004860000-size_0x0000000000012000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_137", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 73728, "start_va": 75890688, "type": "region", "version": 1 }, "end_va": 75964415, "entry_point": 0, "filename": null, "id": "region_287", "name": "private_0x0000000004860000", "norm_filename": null, "region_type": "private_memory", "start_va": 75890688, "timestamp": "00:01:35.412", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000288-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_138", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76021760, "type": "region", "version": 1 }, "end_va": 76025855, "entry_point": 0, "filename": null, "id": "region_288", "name": "private_0x0000000004880000", "norm_filename": null, "region_type": "private_memory", "start_va": 76021760, "timestamp": "00:01:35.413", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000289-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_139", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76087296, "type": "region", "version": 1 }, "end_va": 76091391, "entry_point": 0, "filename": null, "id": "region_289", "name": "private_0x0000000004890000", "norm_filename": null, "region_type": "private_memory", "start_va": 76087296, "timestamp": "00:01:35.413", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000290-addr_0x00000000048a0000-size_0x0000000000048000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_140", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 294912, "start_va": 76152832, "type": "region", "version": 1 }, "end_va": 76447743, "entry_point": 0, "filename": null, "id": "region_290", "name": "private_0x00000000048a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 76152832, "timestamp": "00:01:35.413", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000291-addr_0x00000000048f0000-size_0x0000000000048000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_141", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 294912, "start_va": 76480512, "type": "region", "version": 1 }, "end_va": 76775423, "entry_point": 0, "filename": null, "id": "region_291", "name": "private_0x00000000048f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 76480512, "timestamp": "00:01:35.413", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000292-addr_0x0000000004940000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_142", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76808192, "type": "region", "version": 1 }, "end_va": 76812287, "entry_point": 0, "filename": null, "id": "region_292", "name": "private_0x0000000004940000", "norm_filename": null, "region_type": "private_memory", "start_va": 76808192, "timestamp": "00:01:35.414", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000293-addr_0x0000000004950000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_143", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76873728, "type": "region", "version": 1 }, "end_va": 76877823, "entry_point": 0, "filename": null, "id": "region_293", "name": "private_0x0000000004950000", "norm_filename": null, "region_type": "private_memory", "start_va": 76873728, "timestamp": "00:01:35.414", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000294-addr_0x0000000004960000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_144", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76939264, "type": "region", "version": 1 }, "end_va": 76943359, "entry_point": 0, "filename": null, "id": "region_294", "name": "private_0x0000000004960000", "norm_filename": null, "region_type": "private_memory", "start_va": 76939264, "timestamp": "00:01:35.414", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000295-addr_0x0000000004970000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_145", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 77004800, "type": "region", "version": 1 }, "end_va": 77266943, "entry_point": 0, "filename": null, "id": "region_295", "name": "private_0x0000000004970000", "norm_filename": null, "region_type": "private_memory", "start_va": 77004800, "timestamp": "00:01:35.414", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000296-addr_0x00000000049b0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_146", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 77266944, "type": "region", "version": 1 }, "end_va": 77271039, "entry_point": 0, "filename": null, "id": "region_296", "name": "private_0x00000000049b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 77266944, "timestamp": "00:01:35.415", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000297-addr_0x00000000049c0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_147", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 77332480, "type": "region", "version": 1 }, "end_va": 77398015, "entry_point": 0, "filename": null, "id": "region_297", "name": "private_0x00000000049c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 77332480, "timestamp": "00:01:35.416", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000298-addr_0x00000000049d0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_148", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 77398016, "type": "region", "version": 1 }, "end_va": 78446591, "entry_point": 0, "filename": null, "id": "region_298", "name": "private_0x00000000049d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 77398016, "timestamp": "00:01:35.416", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000299-addr_0x0000000004ad0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_149", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 78446592, "type": "region", "version": 1 }, "end_va": 79495167, "entry_point": 0, "filename": null, "id": "region_299", "name": "private_0x0000000004ad0000", "norm_filename": null, "region_type": "private_memory", "start_va": 78446592, "timestamp": "00:01:35.416", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000302-addr_0x0000000004bf0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_150", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 79626240, "type": "region", "version": 1 }, "end_va": 79888383, "entry_point": 0, "filename": null, "id": "region_302", "name": "private_0x0000000004bf0000", "norm_filename": null, "region_type": "private_memory", "start_va": 79626240, "timestamp": "00:01:35.418", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000303-addr_0x0000000004c30000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_151", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 79888384, "type": "region", "version": 1 }, "end_va": 79892479, "entry_point": 0, "filename": null, "id": "region_303", "name": "private_0x0000000004c30000", "norm_filename": null, "region_type": "private_memory", "start_va": 79888384, "timestamp": "00:01:35.418", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000304-addr_0x0000000004c40000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_152", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 79953920, "type": "region", "version": 1 }, "end_va": 79958015, "entry_point": 0, "filename": null, "id": "region_304", "name": "private_0x0000000004c40000", "norm_filename": null, "region_type": "private_memory", "start_va": 79953920, "timestamp": "00:01:35.419", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000305-addr_0x0000000004c50000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_153", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80019456, "type": "region", "version": 1 }, "end_va": 80023551, "entry_point": 0, "filename": null, "id": "region_305", "name": "private_0x0000000004c50000", "norm_filename": null, "region_type": "private_memory", "start_va": 80019456, "timestamp": "00:01:35.421", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000306-addr_0x0000000004c60000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_154", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80084992, "type": "region", "version": 1 }, "end_va": 80089087, "entry_point": 0, "filename": null, "id": "region_306", "name": "private_0x0000000004c60000", "norm_filename": null, "region_type": "private_memory", "start_va": 80084992, "timestamp": "00:01:35.421", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000307-addr_0x0000000004c70000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_155", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80150528, "type": "region", "version": 1 }, "end_va": 80154623, "entry_point": 0, "filename": null, "id": "region_307", "name": "private_0x0000000004c70000", "norm_filename": null, "region_type": "private_memory", "start_va": 80150528, "timestamp": "00:01:35.421", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000308-addr_0x0000000004c80000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_156", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80216064, "type": "region", "version": 1 }, "end_va": 80220159, "entry_point": 0, "filename": null, "id": "region_308", "name": "private_0x0000000004c80000", "norm_filename": null, "region_type": "private_memory", "start_va": 80216064, "timestamp": "00:01:35.421", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000309-addr_0x0000000004c90000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_157", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80281600, "type": "region", "version": 1 }, "end_va": 80285695, "entry_point": 0, "filename": null, "id": "region_309", "name": "private_0x0000000004c90000", "norm_filename": null, "region_type": "private_memory", "start_va": 80281600, "timestamp": "00:01:35.422", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000310-addr_0x0000000004ca0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_158", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 80347136, "type": "region", "version": 1 }, "end_va": 80351231, "entry_point": 0, "filename": null, "id": "region_310", "name": "private_0x0000000004ca0000", "norm_filename": null, "region_type": "private_memory", "start_va": 80347136, "timestamp": "00:01:35.422", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000311-addr_0x0000000004cb0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_159", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 80412672, "type": "region", "version": 1 }, "end_va": 81461247, "entry_point": 0, "filename": null, "id": "region_311", "name": "private_0x0000000004cb0000", "norm_filename": null, "region_type": "private_memory", "start_va": 80412672, "timestamp": "00:01:35.422", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000315-addr_0x0000000004e00000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_160", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 81788928, "type": "region", "version": 1 }, "end_va": 81793023, "entry_point": 0, "filename": null, "id": "region_315", "name": "private_0x0000000004e00000", "norm_filename": null, "region_type": "private_memory", "start_va": 81788928, "timestamp": "00:01:35.423", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000316-addr_0x0000000004e10000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_161", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 81854464, "type": "region", "version": 1 }, "end_va": 81858559, "entry_point": 0, "filename": null, "id": "region_316", "name": "private_0x0000000004e10000", "norm_filename": null, "region_type": "private_memory", "start_va": 81854464, "timestamp": "00:01:35.423", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000317-addr_0x0000000004e20000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_162", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 81920000, "type": "region", "version": 1 }, "end_va": 82182143, "entry_point": 0, "filename": null, "id": "region_317", "name": "private_0x0000000004e20000", "norm_filename": null, "region_type": "private_memory", "start_va": 81920000, "timestamp": "00:01:35.423", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000319-addr_0x0000000004ed0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_163", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 82640896, "type": "region", "version": 1 }, "end_va": 82644991, "entry_point": 0, "filename": null, "id": "region_319", "name": "private_0x0000000004ed0000", "norm_filename": null, "region_type": "private_memory", "start_va": 82640896, "timestamp": "00:01:35.423", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000322-addr_0x0000000004f00000-size_0x0000000000001000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_164", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 82837504, "type": "region", "version": 1 }, "end_va": 82841599, "entry_point": 0, "filename": null, "id": "region_322", "name": "private_0x0000000004f00000", "norm_filename": null, "region_type": "private_memory", "start_va": 82837504, "timestamp": "00:01:35.424", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000323-addr_0x0000000004f10000-size_0x0000000000008000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_165", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 32768, "start_va": 82903040, "type": "region", "version": 1 }, "end_va": 82935807, "entry_point": 0, "filename": null, "id": "region_323", "name": "private_0x0000000004f10000", "norm_filename": null, "region_type": "private_memory", "start_va": 82903040, "timestamp": "00:01:35.426", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000328-addr_0x0000000004f60000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_166", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 83230720, "type": "region", "version": 1 }, "end_va": 83492863, "entry_point": 0, "filename": null, "id": "region_328", "name": "private_0x0000000004f60000", "norm_filename": null, "region_type": "private_memory", "start_va": 83230720, "timestamp": "00:01:35.445", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000330-addr_0x0000000004fb0000-size_0x0000000000002000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_167", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 83558400, "type": "region", "version": 1 }, "end_va": 83566591, "entry_point": 0, "filename": null, "id": "region_330", "name": "private_0x0000000004fb0000", "norm_filename": null, "region_type": "private_memory", "start_va": 83558400, "timestamp": "00:01:35.446", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000331-addr_0x0000000004fc0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_168", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 83623936, "type": "region", "version": 1 }, "end_va": 84672511, "entry_point": 0, "filename": null, "id": "region_331", "name": "private_0x0000000004fc0000", "norm_filename": null, "region_type": "private_memory", "start_va": 83623936, "timestamp": "00:01:35.446", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000332-addr_0x00000000050c0000-size_0x0000000000200000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_169", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 2097152, "start_va": 84672512, "type": "region", "version": 1 }, "end_va": 86769663, "entry_point": 0, "filename": null, "id": "region_332", "name": "private_0x00000000050c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 84672512, "timestamp": "00:01:35.446", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000333-addr_0x00000000052c0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_170", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 86769664, "type": "region", "version": 1 }, "end_va": 86773759, "entry_point": 0, "filename": null, "id": "region_333", "name": "private_0x00000000052c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86769664, "timestamp": "00:01:35.447", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000334-addr_0x00000000052d0000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_171", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 86835200, "type": "region", "version": 1 }, "end_va": 86843391, "entry_point": 0, "filename": null, "id": "region_334", "name": "private_0x00000000052d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86835200, "timestamp": "00:01:35.447", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000335-addr_0x00000000052e0000-size_0x0000000000009000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_172", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 36864, "start_va": 86900736, "type": "region", "version": 1 }, "end_va": 86937599, "entry_point": 0, "filename": null, "id": "region_335", "name": "private_0x00000000052e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86900736, "timestamp": "00:01:35.448", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000336-addr_0x00000000052f0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_173", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 86966272, "type": "region", "version": 1 }, "end_va": 87228415, "entry_point": 0, "filename": null, "id": "region_336", "name": "private_0x00000000052f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86966272, "timestamp": "00:01:35.449", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000337-addr_0x0000000005330000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_174", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 87228416, "type": "region", "version": 1 }, "end_va": 87240703, "entry_point": 0, "filename": null, "id": "region_337", "name": "private_0x0000000005330000", "norm_filename": null, "region_type": "private_memory", "start_va": 87228416, "timestamp": "00:01:35.450", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000338-addr_0x0000000005340000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_175", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 87293952, "type": "region", "version": 1 }, "end_va": 87306239, "entry_point": 0, "filename": null, "id": "region_338", "name": "private_0x0000000005340000", "norm_filename": null, "region_type": "private_memory", "start_va": 87293952, "timestamp": "00:01:35.452", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000339-addr_0x0000000005350000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_176", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 87359488, "type": "region", "version": 1 }, "end_va": 87621631, "entry_point": 0, "filename": null, "id": "region_339", "name": "private_0x0000000005350000", "norm_filename": null, "region_type": "private_memory", "start_va": 87359488, "timestamp": "00:01:35.452", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000340-addr_0x0000000005390000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_177", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 87621632, "type": "region", "version": 1 }, "end_va": 87883775, "entry_point": 0, "filename": null, "id": "region_340", "name": "private_0x0000000005390000", "norm_filename": null, "region_type": "private_memory", "start_va": 87621632, "timestamp": "00:01:35.453", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000341-addr_0x00000000053d0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_178", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 87883776, "type": "region", "version": 1 }, "end_va": 88145919, "entry_point": 0, "filename": null, "id": "region_341", "name": "private_0x00000000053d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 87883776, "timestamp": "00:01:35.453", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000342-addr_0x0000000005430000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_179", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 88276992, "type": "region", "version": 1 }, "end_va": 88539135, "entry_point": 0, "filename": null, "id": "region_342", "name": "private_0x0000000005430000", "norm_filename": null, "region_type": "private_memory", "start_va": 88276992, "timestamp": "00:01:35.454", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000343-addr_0x00000000054b0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_180", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 88801280, "type": "region", "version": 1 }, "end_va": 89849855, "entry_point": 0, "filename": null, "id": "region_343", "name": "private_0x00000000054b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 88801280, "timestamp": "00:01:35.454", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000344-addr_0x00000000055d0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_181", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 89980928, "type": "region", "version": 1 }, "end_va": 91029503, "entry_point": 0, "filename": null, "id": "region_344", "name": "private_0x00000000055d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 89980928, "timestamp": "00:01:35.454", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000345-addr_0x00000000056d0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_182", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 91029504, "type": "region", "version": 1 }, "end_va": 91291647, "entry_point": 0, "filename": null, "id": "region_345", "name": "private_0x00000000056d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 91029504, "timestamp": "00:01:35.455", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000346-addr_0x0000000005710000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_183", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 91291648, "type": "region", "version": 1 }, "end_va": 92340223, "entry_point": 0, "filename": null, "id": "region_346", "name": "private_0x0000000005710000", "norm_filename": null, "region_type": "private_memory", "start_va": 91291648, "timestamp": "00:01:35.455", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000347-addr_0x0000000005830000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_184", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 92471296, "type": "region", "version": 1 }, "end_va": 92733439, "entry_point": 0, "filename": null, "id": "region_347", "name": "private_0x0000000005830000", "norm_filename": null, "region_type": "private_memory", "start_va": 92471296, "timestamp": "00:01:35.455", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000348-addr_0x00000000058a0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_185", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 92930048, "type": "region", "version": 1 }, "end_va": 93192191, "entry_point": 0, "filename": null, "id": "region_348", "name": "private_0x00000000058a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 92930048, "timestamp": "00:01:35.456", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000349-addr_0x00000000058f0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_186", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 93257728, "type": "region", "version": 1 }, "end_va": 94306303, "entry_point": 0, "filename": null, "id": "region_349", "name": "private_0x00000000058f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 93257728, "timestamp": "00:01:35.456", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000350-addr_0x0000000005a10000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_187", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 94437376, "type": "region", "version": 1 }, "end_va": 94699519, "entry_point": 0, "filename": null, "id": "region_350", "name": "private_0x0000000005a10000", "norm_filename": null, "region_type": "private_memory", "start_va": 94437376, "timestamp": "00:01:35.457", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000351-addr_0x0000000005b20000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_188", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 95551488, "type": "region", "version": 1 }, "end_va": 96600063, "entry_point": 0, "filename": null, "id": "region_351", "name": "private_0x0000000005b20000", "norm_filename": null, "region_type": "private_memory", "start_va": 95551488, "timestamp": "00:01:35.457", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000352-addr_0x0000000005c20000-size_0x0000000000200000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_189", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 2097152, "start_va": 96600064, "type": "region", "version": 1 }, "end_va": 98697215, "entry_point": 0, "filename": null, "id": "region_352", "name": "private_0x0000000005c20000", "norm_filename": null, "region_type": "private_memory", "start_va": 96600064, "timestamp": "00:01:35.457", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000353-addr_0x0000000005f80000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_190", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 100139008, "type": "region", "version": 1 }, "end_va": 101187583, "entry_point": 0, "filename": null, "id": "region_353", "name": "private_0x0000000005f80000", "norm_filename": null, "region_type": "private_memory", "start_va": 100139008, "timestamp": "00:01:35.458", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000354-addr_0x0000000006160000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_191", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 102105088, "type": "region", "version": 1 }, "end_va": 103153663, "entry_point": 0, "filename": null, "id": "region_354", "name": "private_0x0000000006160000", "norm_filename": null, "region_type": "private_memory", "start_va": 102105088, "timestamp": "00:01:35.458", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000355-addr_0x0000000006320000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_192", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 103940096, "type": "region", "version": 1 }, "end_va": 104988671, "entry_point": 0, "filename": null, "id": "region_355", "name": "private_0x0000000006320000", "norm_filename": null, "region_type": "private_memory", "start_va": 103940096, "timestamp": "00:01:35.458", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000356-addr_0x0000000007860000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_193", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 126222336, "type": "region", "version": 1 }, "end_va": 127270911, "entry_point": 0, "filename": null, "id": "region_356", "name": "private_0x0000000007860000", "norm_filename": null, "region_type": "private_memory", "start_va": 126222336, "timestamp": "00:01:35.458", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000357-addr_0x00000000079e0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_194", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 127795200, "type": "region", "version": 1 }, "end_va": 128843775, "entry_point": 0, "filename": null, "id": "region_357", "name": "private_0x00000000079e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 127795200, "timestamp": "00:01:35.459", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000358-addr_0x0000000007c10000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_195", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 130088960, "type": "region", "version": 1 }, "end_va": 131137535, "entry_point": 0, "filename": null, "id": "region_358", "name": "private_0x0000000007c10000", "norm_filename": null, "region_type": "private_memory", "start_va": 130088960, "timestamp": "00:01:35.459", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000461-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_196", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1024000, "start_va": 2004221952, "type": "region", "version": 1 }, "end_va": 2005245951, "entry_point": 0, "filename": null, "id": "region_461", "name": "private_0x0000000077760000", "norm_filename": null, "region_type": "private_memory", "start_va": 2004221952, "timestamp": "00:01:38.125", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000462-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_197", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1175552, "start_va": 2005270528, "type": "region", "version": 1 }, "end_va": 2006446079, "entry_point": 0, "filename": null, "id": "region_462", "name": "private_0x0000000077860000", "norm_filename": null, "region_type": "private_memory", "start_va": 2005270528, "timestamp": "00:01:38.125", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000465-addr_0x000000007ef7a000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_198", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130157568, "type": "region", "version": 1 }, "end_va": 2130169855, "entry_point": 0, "filename": null, "id": "region_465", "name": "private_0x000000007ef7a000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130157568, "timestamp": "00:01:38.350", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000466-addr_0x000000007ef7d000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_199", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130169856, "type": "region", "version": 1 }, "end_va": 2130182143, "entry_point": 0, "filename": null, "id": "region_466", "name": "private_0x000000007ef7d000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130169856, "timestamp": "00:01:38.351", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000467-addr_0x000000007ef80000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_200", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130182144, "type": "region", "version": 1 }, "end_va": 2130194431, "entry_point": 0, "filename": null, "id": "region_467", "name": "private_0x000000007ef80000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130182144, "timestamp": "00:01:38.351", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000468-addr_0x000000007ef83000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_201", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130194432, "type": "region", "version": 1 }, "end_va": 2130206719, "entry_point": 0, "filename": null, "id": "region_468", "name": "private_0x000000007ef83000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130194432, "timestamp": "00:01:38.351", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000469-addr_0x000000007ef86000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_202", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130206720, "type": "region", "version": 1 }, "end_va": 2130219007, "entry_point": 0, "filename": null, "id": "region_469", "name": "private_0x000000007ef86000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130206720, "timestamp": "00:01:38.351", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000470-addr_0x000000007ef89000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_203", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130219008, "type": "region", "version": 1 }, "end_va": 2130231295, "entry_point": 0, "filename": null, "id": "region_470", "name": "private_0x000000007ef89000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130219008, "timestamp": "00:01:38.352", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000471-addr_0x000000007ef8c000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_204", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130231296, "type": "region", "version": 1 }, "end_va": 2130243583, "entry_point": 0, "filename": null, "id": "region_471", "name": "private_0x000000007ef8c000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130231296, "timestamp": "00:01:38.356", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000472-addr_0x000000007ef8f000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_205", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130243584, "type": "region", "version": 1 }, "end_va": 2130255871, "entry_point": 0, "filename": null, "id": "region_472", "name": "private_0x000000007ef8f000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130243584, "timestamp": "00:01:38.356", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000473-addr_0x000000007ef92000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_206", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130255872, "type": "region", "version": 1 }, "end_va": 2130268159, "entry_point": 0, "filename": null, "id": "region_473", "name": "private_0x000000007ef92000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130255872, "timestamp": "00:01:38.357", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000474-addr_0x000000007ef95000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_207", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130268160, "type": "region", "version": 1 }, "end_va": 2130280447, "entry_point": 0, "filename": null, "id": "region_474", "name": "private_0x000000007ef95000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130268160, "timestamp": "00:01:38.357", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000475-addr_0x000000007ef98000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_208", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130280448, "type": "region", "version": 1 }, "end_va": 2130292735, "entry_point": 0, "filename": null, "id": "region_475", "name": "private_0x000000007ef98000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130280448, "timestamp": "00:01:38.358", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000476-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_209", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130292736, "type": "region", "version": 1 }, "end_va": 2130305023, "entry_point": 0, "filename": null, "id": "region_476", "name": "private_0x000000007ef9b000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130292736, "timestamp": "00:01:38.358", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000477-addr_0x000000007ef9e000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_210", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130305024, "type": "region", "version": 1 }, "end_va": 2130317311, "entry_point": 0, "filename": null, "id": "region_477", "name": "private_0x000000007ef9e000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130305024, "timestamp": "00:01:38.358", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000478-addr_0x000000007efa1000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_211", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130317312, "type": "region", "version": 1 }, "end_va": 2130329599, "entry_point": 0, "filename": null, "id": "region_478", "name": "private_0x000000007efa1000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130317312, "timestamp": "00:01:38.359", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000479-addr_0x000000007efa4000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_212", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130329600, "type": "region", "version": 1 }, "end_va": 2130341887, "entry_point": 0, "filename": null, "id": "region_479", "name": "private_0x000000007efa4000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130329600, "timestamp": "00:01:38.359", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000480-addr_0x000000007efa7000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_213", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130341888, "type": "region", "version": 1 }, "end_va": 2130354175, "entry_point": 0, "filename": null, "id": "region_480", "name": "private_0x000000007efa7000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130341888, "timestamp": "00:01:38.359", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000481-addr_0x000000007efaa000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_214", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130354176, "type": "region", "version": 1 }, "end_va": 2130366463, "entry_point": 0, "filename": null, "id": "region_481", "name": "private_0x000000007efaa000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130354176, "timestamp": "00:01:38.360", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000482-addr_0x000000007efad000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_215", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130366464, "type": "region", "version": 1 }, "end_va": 2130378751, "entry_point": 0, "filename": null, "id": "region_482", "name": "private_0x000000007efad000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130366464, "timestamp": "00:01:38.362", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000484-addr_0x000000007efd5000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_216", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130530304, "type": "region", "version": 1 }, "end_va": 2130542591, "entry_point": 0, "filename": null, "id": "region_484", "name": "private_0x000000007efd5000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130530304, "timestamp": "00:01:38.362", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000485-addr_0x000000007efd8000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_217", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130542592, "type": "region", "version": 1 }, "end_va": 2130554879, "entry_point": 0, "filename": null, "id": "region_485", "name": "private_0x000000007efd8000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130542592, "timestamp": "00:01:38.364", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000486-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_218", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130554880, "type": "region", "version": 1 }, "end_va": 2130567167, "entry_point": 0, "filename": null, "id": "region_486", "name": "private_0x000000007efdb000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130554880, "timestamp": "00:01:38.364", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000487-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_219", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2130567168, "type": "region", "version": 1 }, "end_va": 2130571263, "entry_point": 0, "filename": null, "id": "region_487", "name": "private_0x000000007efde000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130567168, "timestamp": "00:01:38.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000488-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_220", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2130571264, "type": "region", "version": 1 }, "end_va": 2130575359, "entry_point": 0, "filename": null, "id": "region_488", "name": "private_0x000000007efdf000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130571264, "timestamp": "00:01:38.365", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000491-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable" ], "ref_process_dump": { "ref_id": "proc_dump_221", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2147352576, "type": "region", "version": 1 }, "end_va": 2147418111, "entry_point": 0, "filename": null, "id": "region_491", "name": "private_0x000000007ffe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2147352576, "timestamp": "00:01:38.366", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000502-addr_0x0000000005f10000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_222", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 99680256, "type": "region", "version": 1 }, "end_va": 99942399, "entry_point": 0, "filename": null, "id": "region_502", "name": "private_0x0000000005f10000", "norm_filename": null, "region_type": "private_memory", "start_va": 99680256, "timestamp": "00:01:42.637", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000503-addr_0x0000000006420000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_223", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 104988672, "type": "region", "version": 1 }, "end_va": 106037247, "entry_point": 0, "filename": null, "id": "region_503", "name": "private_0x0000000006420000", "norm_filename": null, "region_type": "private_memory", "start_va": 104988672, "timestamp": "00:01:42.637", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000504-addr_0x0000000006560000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_224", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 106299392, "type": "region", "version": 1 }, "end_va": 107347967, "entry_point": 0, "filename": null, "id": "region_504", "name": "private_0x0000000006560000", "norm_filename": null, "region_type": "private_memory", "start_va": 106299392, "timestamp": "00:01:42.637", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000507-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_225", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130145280, "type": "region", "version": 1 }, "end_va": 2130157567, "entry_point": 0, "filename": null, "id": "region_507", "name": "private_0x000000007ef77000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130145280, "timestamp": "00:01:42.673", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000508-addr_0x0000000003af0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_226", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 61800448, "type": "region", "version": 1 }, "end_va": 61865983, "entry_point": 0, "filename": null, "id": "region_508", "name": "private_0x0000000003af0000", "norm_filename": null, "region_type": "private_memory", "start_va": 61800448, "timestamp": "00:01:43.569", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000509-addr_0x0000000004020000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_227", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 67239936, "type": "region", "version": 1 }, "end_va": 67244031, "entry_point": 0, "filename": null, "id": "region_509", "name": "private_0x0000000004020000", "norm_filename": null, "region_type": "private_memory", "start_va": 67239936, "timestamp": "00:01:43.569", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000510-addr_0x0000000004030000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_228", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 67305472, "type": "region", "version": 1 }, "end_va": 67313663, "entry_point": 0, "filename": null, "id": "region_510", "name": "private_0x0000000004030000", "norm_filename": null, "region_type": "private_memory", "start_va": 67305472, "timestamp": "00:01:43.569", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000517-addr_0x0000000004020000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_229", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 67239936, "type": "region", "version": 1 }, "end_va": 67305471, "entry_point": 0, "filename": null, "id": "region_517", "name": "private_0x0000000004020000", "norm_filename": null, "region_type": "private_memory", "start_va": 67239936, "timestamp": "00:01:44.639", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000518-addr_0x0000000004080000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_230", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 67633152, "type": "region", "version": 1 }, "end_va": 67637247, "entry_point": 0, "filename": null, "id": "region_518", "name": "private_0x0000000004080000", "norm_filename": null, "region_type": "private_memory", "start_va": 67633152, "timestamp": "00:01:44.639", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000519-addr_0x00000000042a0000-size_0x0000000000020000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_231", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 131072, "start_va": 69861376, "type": "region", "version": 1 }, "end_va": 69992447, "entry_point": 0, "filename": null, "id": "region_519", "name": "private_0x00000000042a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 69861376, "timestamp": "00:01:44.640", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000520-addr_0x00000000042c0000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_232", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 69992448, "type": "region", "version": 1 }, "end_va": 70004735, "entry_point": 0, "filename": null, "id": "region_520", "name": "private_0x00000000042c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 69992448, "timestamp": "00:01:44.640", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000521-addr_0x00000000042e0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_233", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 70123520, "type": "region", "version": 1 }, "end_va": 70139903, "entry_point": 0, "filename": null, "id": "region_521", "name": "private_0x00000000042e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 70123520, "timestamp": "00:01:44.640", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000522-addr_0x0000000004880000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_234", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76021760, "type": "region", "version": 1 }, "end_va": 76025855, "entry_point": 0, "filename": null, "id": "region_522", "name": "private_0x0000000004880000", "norm_filename": null, "region_type": "private_memory", "start_va": 76021760, "timestamp": "00:01:44.641", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000523-addr_0x0000000004890000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_235", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 76087296, "type": "region", "version": 1 }, "end_va": 76091391, "entry_point": 0, "filename": null, "id": "region_523", "name": "private_0x0000000004890000", "norm_filename": null, "region_type": "private_memory", "start_va": 76087296, "timestamp": "00:01:44.641", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000524-addr_0x0000000004b50000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_236", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 78970880, "type": "region", "version": 1 }, "end_va": 78987263, "entry_point": 0, "filename": null, "id": "region_524", "name": "private_0x0000000004b50000", "norm_filename": null, "region_type": "private_memory", "start_va": 78970880, "timestamp": "00:01:44.641", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000525-addr_0x0000000004b60000-size_0x0000000000020000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_237", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 131072, "start_va": 79036416, "type": "region", "version": 1 }, "end_va": 79167487, "entry_point": 0, "filename": null, "id": "region_525", "name": "private_0x0000000004b60000", "norm_filename": null, "region_type": "private_memory", "start_va": 79036416, "timestamp": "00:01:44.642", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000526-addr_0x0000000004b80000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_238", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 79167488, "type": "region", "version": 1 }, "end_va": 79179775, "entry_point": 0, "filename": null, "id": "region_526", "name": "private_0x0000000004b80000", "norm_filename": null, "region_type": "private_memory", "start_va": 79167488, "timestamp": "00:01:44.642", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000529-addr_0x0000000004bb0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_239", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 79364096, "type": "region", "version": 1 }, "end_va": 79380479, "entry_point": 0, "filename": null, "id": "region_529", "name": "private_0x0000000004bb0000", "norm_filename": null, "region_type": "private_memory", "start_va": 79364096, "timestamp": "00:01:44.643", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000530-addr_0x0000000004bc0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_240", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 79429632, "type": "region", "version": 1 }, "end_va": 79446015, "entry_point": 0, "filename": null, "id": "region_530", "name": "private_0x0000000004bc0000", "norm_filename": null, "region_type": "private_memory", "start_va": 79429632, "timestamp": "00:01:44.643", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000532-addr_0x0000000004e00000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_241", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 81788928, "type": "region", "version": 1 }, "end_va": 81801215, "entry_point": 0, "filename": null, "id": "region_532", "name": "private_0x0000000004e00000", "norm_filename": null, "region_type": "private_memory", "start_va": 81788928, "timestamp": "00:01:44.643", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000534-addr_0x0000000004e20000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_242", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 81920000, "type": "region", "version": 1 }, "end_va": 81985535, "entry_point": 0, "filename": null, "id": "region_534", "name": "private_0x0000000004e20000", "norm_filename": null, "region_type": "private_memory", "start_va": 81920000, "timestamp": "00:01:44.644", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000536-addr_0x0000000004e40000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_243", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 82051072, "type": "region", "version": 1 }, "end_va": 82116607, "entry_point": 0, "filename": null, "id": "region_536", "name": "private_0x0000000004e40000", "norm_filename": null, "region_type": "private_memory", "start_va": 82051072, "timestamp": "00:01:44.644", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000537-addr_0x0000000004e50000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_244", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 82116608, "type": "region", "version": 1 }, "end_va": 82120703, "entry_point": 0, "filename": null, "id": "region_537", "name": "private_0x0000000004e50000", "norm_filename": null, "region_type": "private_memory", "start_va": 82116608, "timestamp": "00:01:44.645", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000538-addr_0x0000000004f10000-size_0x0000000000010000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_245", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 82903040, "type": "region", "version": 1 }, "end_va": 82968575, "entry_point": 0, "filename": null, "id": "region_538", "name": "private_0x0000000004f10000", "norm_filename": null, "region_type": "private_memory", "start_va": 82903040, "timestamp": "00:01:44.645", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000539-addr_0x0000000004f50000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_246", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 83165184, "type": "region", "version": 1 }, "end_va": 83181567, "entry_point": 0, "filename": null, "id": "region_539", "name": "private_0x0000000004f50000", "norm_filename": null, "region_type": "private_memory", "start_va": 83165184, "timestamp": "00:01:44.645", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000541-addr_0x0000000005ad0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_247", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 95223808, "type": "region", "version": 1 }, "end_va": 95485951, "entry_point": 0, "filename": null, "id": "region_541", "name": "private_0x0000000005ad0000", "norm_filename": null, "region_type": "private_memory", "start_va": 95223808, "timestamp": "00:01:44.648", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000542-addr_0x0000000005cf0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_248", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 97452032, "type": "region", "version": 1 }, "end_va": 97517567, "entry_point": 0, "filename": null, "id": "region_542", "name": "private_0x0000000005cf0000", "norm_filename": null, "region_type": "private_memory", "start_va": 97452032, "timestamp": "00:01:44.648", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000544-addr_0x0000000005f00000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_249", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 99614720, "type": "region", "version": 1 }, "end_va": 99876863, "entry_point": 0, "filename": null, "id": "region_544", "name": "private_0x0000000005f00000", "norm_filename": null, "region_type": "private_memory", "start_va": 99614720, "timestamp": "00:01:44.649", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000545-addr_0x00000000060a0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_250", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 101318656, "type": "region", "version": 1 }, "end_va": 101580799, "entry_point": 0, "filename": null, "id": "region_545", "name": "private_0x00000000060a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 101318656, "timestamp": "00:01:44.649", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000547-addr_0x0000000006e30000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_251", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 115539968, "type": "region", "version": 1 }, "end_va": 116588543, "entry_point": 0, "filename": null, "id": "region_547", "name": "private_0x0000000006e30000", "norm_filename": null, "region_type": "private_memory", "start_va": 115539968, "timestamp": "00:01:44.650", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000548-addr_0x0000000006fc0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_252", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 117178368, "type": "region", "version": 1 }, "end_va": 118226943, "entry_point": 0, "filename": null, "id": "region_548", "name": "private_0x0000000006fc0000", "norm_filename": null, "region_type": "private_memory", "start_va": 117178368, "timestamp": "00:01:44.650", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000549-addr_0x0000000007150000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_253", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 118816768, "type": "region", "version": 1 }, "end_va": 119865343, "entry_point": 0, "filename": null, "id": "region_549", "name": "private_0x0000000007150000", "norm_filename": null, "region_type": "private_memory", "start_va": 118816768, "timestamp": "00:01:44.650", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000551-addr_0x000000007ef74000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_254", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130132992, "type": "region", "version": 1 }, "end_va": 2130145279, "entry_point": 0, "filename": null, "id": "region_551", "name": "private_0x000000007ef74000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130132992, "timestamp": "00:01:44.651", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000552-addr_0x000000007ef77000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_255", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130145280, "type": "region", "version": 1 }, "end_va": 2130157567, "entry_point": 0, "filename": null, "id": "region_552", "name": "private_0x000000007ef77000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130145280, "timestamp": "00:01:44.651", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000553-addr_0x000000007ef9b000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_256", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130292736, "type": "region", "version": 1 }, "end_va": 2130305023, "entry_point": 0, "filename": null, "id": "region_553", "name": "private_0x000000007ef9b000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130292736, "timestamp": "00:01:44.652", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000554-addr_0x00000000052d0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_257", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 86835200, "type": "region", "version": 1 }, "end_va": 86851583, "entry_point": 0, "filename": null, "id": "region_554", "name": "private_0x00000000052d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86835200, "timestamp": "00:01:44.702", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000555-addr_0x00000000052e0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_258", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 86900736, "type": "region", "version": 1 }, "end_va": 86917119, "entry_point": 0, "filename": null, "id": "region_555", "name": "private_0x00000000052e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 86900736, "timestamp": "00:01:44.704", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000556-addr_0x0000000005330000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_259", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 87228416, "type": "region", "version": 1 }, "end_va": 87244799, "entry_point": 0, "filename": null, "id": "region_556", "name": "private_0x0000000005330000", "norm_filename": null, "region_type": "private_memory", "start_va": 87228416, "timestamp": "00:01:44.706", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000557-addr_0x0000000005340000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_260", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 87293952, "type": "region", "version": 1 }, "end_va": 87310335, "entry_point": 0, "filename": null, "id": "region_557", "name": "private_0x0000000005340000", "norm_filename": null, "region_type": "private_memory", "start_va": 87293952, "timestamp": "00:01:44.719", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000558-addr_0x0000000005410000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_261", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 88145920, "type": "region", "version": 1 }, "end_va": 88162303, "entry_point": 0, "filename": null, "id": "region_558", "name": "private_0x0000000005410000", "norm_filename": null, "region_type": "private_memory", "start_va": 88145920, "timestamp": "00:01:44.720", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000559-addr_0x0000000005480000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_262", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 88604672, "type": "region", "version": 1 }, "end_va": 88621055, "entry_point": 0, "filename": null, "id": "region_559", "name": "private_0x0000000005480000", "norm_filename": null, "region_type": "private_memory", "start_va": 88604672, "timestamp": "00:01:44.722", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000560-addr_0x0000000005490000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_263", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 88670208, "type": "region", "version": 1 }, "end_va": 88686591, "entry_point": 0, "filename": null, "id": "region_560", "name": "private_0x0000000005490000", "norm_filename": null, "region_type": "private_memory", "start_va": 88670208, "timestamp": "00:01:44.739", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000561-addr_0x00000000054a0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_264", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 88735744, "type": "region", "version": 1 }, "end_va": 88752127, "entry_point": 0, "filename": null, "id": "region_561", "name": "private_0x00000000054a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 88735744, "timestamp": "00:01:44.741", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000562-addr_0x00000000055b0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_265", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 89849856, "type": "region", "version": 1 }, "end_va": 89866239, "entry_point": 0, "filename": null, "id": "region_562", "name": "private_0x00000000055b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 89849856, "timestamp": "00:01:44.742", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000563-addr_0x00000000055c0000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_266", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 89915392, "type": "region", "version": 1 }, "end_va": 89931775, "entry_point": 0, "filename": null, "id": "region_563", "name": "private_0x00000000055c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 89915392, "timestamp": "00:01:44.744", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000564-addr_0x0000000005810000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_267", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 92340224, "type": "region", "version": 1 }, "end_va": 92356607, "entry_point": 0, "filename": null, "id": "region_564", "name": "private_0x0000000005810000", "norm_filename": null, "region_type": "private_memory", "start_va": 92340224, "timestamp": "00:01:44.745", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000565-addr_0x0000000005820000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_268", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 92405760, "type": "region", "version": 1 }, "end_va": 92422143, "entry_point": 0, "filename": null, "id": "region_565", "name": "private_0x0000000005820000", "norm_filename": null, "region_type": "private_memory", "start_va": 92405760, "timestamp": "00:01:44.793", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000566-addr_0x0000000005870000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_269", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 92733440, "type": "region", "version": 1 }, "end_va": 92749823, "entry_point": 0, "filename": null, "id": "region_566", "name": "private_0x0000000005870000", "norm_filename": null, "region_type": "private_memory", "start_va": 92733440, "timestamp": "00:01:44.795", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000567-addr_0x0000000005880000-size_0x0000000000004000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_270", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 16384, "start_va": 92798976, "type": "region", "version": 1 }, "end_va": 92815359, "entry_point": 0, "filename": null, "id": "region_567", "name": "private_0x0000000005880000", "norm_filename": null, "region_type": "private_memory", "start_va": 92798976, "timestamp": "00:01:44.797", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000568-addr_0x0000000007250000-size_0x0000000000400000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_271", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4194304, "start_va": 119865344, "type": "region", "version": 1 }, "end_va": 124059647, "entry_point": 0, "filename": null, "id": "region_568", "name": "private_0x0000000007250000", "norm_filename": null, "region_type": "private_memory", "start_va": 119865344, "timestamp": "00:01:44.840", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000569-addr_0x0000000005c20000-size_0x00000000000a0000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_272", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 655360, "start_va": 96600064, "type": "region", "version": 1 }, "end_va": 97255423, "entry_point": 0, "filename": null, "id": "region_569", "name": "private_0x0000000005c20000", "norm_filename": null, "region_type": "private_memory", "start_va": 96600064, "timestamp": "00:01:44.928", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000571-addr_0x00000000059f0000-size_0x0000000000018000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_273", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 98304, "start_va": 94306304, "type": "region", "version": 1 }, "end_va": 94404607, "entry_point": 94306304, "filename": "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat", "id": "region_571", "name": "index.dat", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat", "region_type": "memory_mapped_file", "start_va": 94306304, "timestamp": "00:01:45.131", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000573-addr_0x00000000058e0000-size_0x0000000000008000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_274", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 32768, "start_va": 93192192, "type": "region", "version": 1 }, "end_va": 93224959, "entry_point": 93192192, "filename": "\\Users\\kFT6uTQW\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat", "id": "region_573", "name": "index.dat", "norm_filename": "c:\\users\\kft6utqw\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat", "region_type": "memory_mapped_file", "start_va": 93192192, "timestamp": "00:01:45.150", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000574-addr_0x0000000005b10000-size_0x000000000000c000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_275", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 49152, "start_va": 95485952, "type": "region", "version": 1 }, "end_va": 95535103, "entry_point": 95485952, "filename": "\\Users\\kFT6uTQW\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat", "id": "region_574", "name": "index.dat", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat", "region_type": "memory_mapped_file", "start_va": 95485952, "timestamp": "00:01:45.153", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000577-addr_0x0000000005de0000-size_0x00000000000b0000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_276", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 720896, "start_va": 98435072, "type": "region", "version": 1 }, "end_va": 99155967, "entry_point": 0, "filename": null, "id": "region_577", "name": "private_0x0000000005de0000", "norm_filename": null, "region_type": "private_memory", "start_va": 98435072, "timestamp": "00:01:45.369", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000579-addr_0x0000000007650000-size_0x00000000001d0000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_277", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1900544, "start_va": 124059648, "type": "region", "version": 1 }, "end_va": 125960191, "entry_point": 0, "filename": null, "id": "region_579", "name": "private_0x0000000007650000", "norm_filename": null, "region_type": "private_memory", "start_va": 124059648, "timestamp": "00:01:45.497", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000585-addr_0x0000000006100000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_278", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 101711872, "type": "region", "version": 1 }, "end_va": 101974015, "entry_point": 0, "filename": null, "id": "region_585", "name": "private_0x0000000006100000", "norm_filename": null, "region_type": "private_memory", "start_va": 101711872, "timestamp": "00:01:46.185", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000586-addr_0x00000000080c0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_279", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 135004160, "type": "region", "version": 1 }, "end_va": 136052735, "entry_point": 0, "filename": null, "id": "region_586", "name": "private_0x00000000080c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 135004160, "timestamp": "00:01:46.186", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000588-addr_0x000000007ef71000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_280", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130120704, "type": "region", "version": 1 }, "end_va": 2130132991, "entry_point": 0, "filename": null, "id": "region_588", "name": "private_0x000000007ef71000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130120704, "timestamp": "00:01:46.213", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000589-addr_0x0000000006db0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_281", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 115015680, "type": "region", "version": 1 }, "end_va": 115277823, "entry_point": 0, "filename": null, "id": "region_589", "name": "private_0x0000000006db0000", "norm_filename": null, "region_type": "private_memory", "start_va": 115015680, "timestamp": "00:01:46.262", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000590-addr_0x0000000008260000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_282", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 136708096, "type": "region", "version": 1 }, "end_va": 137756671, "entry_point": 0, "filename": null, "id": "region_590", "name": "private_0x0000000008260000", "norm_filename": null, "region_type": "private_memory", "start_va": 136708096, "timestamp": "00:01:46.262", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000592-addr_0x000000007ef6e000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_283", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130108416, "type": "region", "version": 1 }, "end_va": 2130120703, "entry_point": 0, "filename": null, "id": "region_592", "name": "private_0x000000007ef6e000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130108416, "timestamp": "00:01:46.264", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000596-addr_0x0000000005c80000-size_0x0000000000040000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_284", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 96993280, "type": "region", "version": 1 }, "end_va": 97255423, "entry_point": 0, "filename": null, "id": "region_596", "name": "private_0x0000000005c80000", "norm_filename": null, "region_type": "private_memory", "start_va": 96993280, "timestamp": "00:01:46.302", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000598-addr_0x0000000007650000-size_0x0000000000110000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_285", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1114112, "start_va": 124059648, "type": "region", "version": 1 }, "end_va": 125173759, "entry_point": 0, "filename": null, "id": "region_598", "name": "private_0x0000000007650000", "norm_filename": null, "region_type": "private_memory", "start_va": 124059648, "timestamp": "00:01:46.374", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000599-addr_0x00000000077e0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_286", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 125698048, "type": "region", "version": 1 }, "end_va": 125960191, "entry_point": 0, "filename": null, "id": "region_599", "name": "private_0x00000000077e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 125698048, "timestamp": "00:01:46.375", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000600-addr_0x0000000007ae0000-size_0x0000000000130000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_287", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1245184, "start_va": 128843776, "type": "region", "version": 1 }, "end_va": 130088959, "entry_point": 0, "filename": null, "id": "region_600", "name": "private_0x0000000007ae0000", "norm_filename": null, "region_type": "private_memory", "start_va": 128843776, "timestamp": "00:01:46.376", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000601-addr_0x0000000007650000-size_0x00000000000f0000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_288", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 983040, "start_va": 124059648, "type": "region", "version": 1 }, "end_va": 125042687, "entry_point": 0, "filename": null, "id": "region_601", "name": "private_0x0000000007650000", "norm_filename": null, "region_type": "private_memory", "start_va": 124059648, "timestamp": "00:01:46.378", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000602-addr_0x0000000007750000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_289", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 125108224, "type": "region", "version": 1 }, "end_va": 125173759, "entry_point": 0, "filename": null, "id": "region_602", "name": "private_0x0000000007750000", "norm_filename": null, "region_type": "private_memory", "start_va": 125108224, "timestamp": "00:01:46.378", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000604-addr_0x0000000005eb0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_290", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 99287040, "type": "region", "version": 1 }, "end_va": 99549183, "entry_point": 0, "filename": null, "id": "region_604", "name": "private_0x0000000005eb0000", "norm_filename": null, "region_type": "private_memory", "start_va": 99287040, "timestamp": "00:01:46.439", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000605-addr_0x00000000084c0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_291", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 139198464, "type": "region", "version": 1 }, "end_va": 140247039, "entry_point": 0, "filename": null, "id": "region_605", "name": "private_0x00000000084c0000", "norm_filename": null, "region_type": "private_memory", "start_va": 139198464, "timestamp": "00:01:46.439", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000607-addr_0x000000007ef6b000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_292", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130096128, "type": "region", "version": 1 }, "end_va": 2130108415, "entry_point": 0, "filename": null, "id": "region_607", "name": "private_0x000000007ef6b000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130096128, "timestamp": "00:01:46.445", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000612-addr_0x00000000087a0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_293", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 142213120, "type": "region", "version": 1 }, "end_va": 142475263, "entry_point": 0, "filename": null, "id": "region_612", "name": "private_0x00000000087a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 142213120, "timestamp": "00:01:46.627", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000745-addr_0x0000000006d40000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_336", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 114556928, "type": "region", "version": 1 }, "end_va": 114819071, "entry_point": 0, "filename": null, "id": "region_745", "name": "private_0x0000000006d40000", "norm_filename": null, "region_type": "private_memory", "start_va": 114556928, "timestamp": "00:02:01.489", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000746-addr_0x00000000087e0000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_337", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 142475264, "type": "region", "version": 1 }, "end_va": 143523839, "entry_point": 0, "filename": null, "id": "region_746", "name": "private_0x00000000087e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 142475264, "timestamp": "00:02:01.489", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000001-region_00000748-addr_0x000000007ef68000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_338", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130083840, "type": "region", "version": 1 }, "end_va": 2130096127, "entry_point": 0, "filename": null, "id": "region_748", "name": "private_0x000000007ef68000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130083840, "timestamp": "00:02:01.490", "type": "region", "version": 1 } ], "terminate_reason": "terminated", "type": "monitored_process", "unmonitor_reason": "terminated_by_timeout", "version": 1 }, { "cmd_line": "\"C:\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe\" ", "filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "id": "proc_3", "image_name": "heidi.exe", "monitor_reason": "child_process", "monitored_id": 3, "origin_monitor_id": 1, "ref_parent_process": { "ref_id": "proc_1", "ref_source": "summary", "ref_type": "monitored_process", "type": "reference", "version": 1 }, "regions": [ { "dump": { "filename": "process_00000003-region_00000750-addr_0x0000000000010000-size_0x0000000000020000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_339", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 131072, "start_va": 65536, "type": "region", "version": 1 }, "end_va": 196607, "entry_point": 0, "filename": null, "id": "region_750", "name": "private_0x0000000000010000", "norm_filename": null, "region_type": "private_memory", "start_va": 65536, "timestamp": "00:02:03.677", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000751-addr_0x0000000000030000-size_0x0000000000002000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_340", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 8192, "start_va": 196608, "type": "region", "version": 1 }, "end_va": 204799, "entry_point": 0, "filename": null, "id": "region_751", "name": "private_0x0000000000030000", "norm_filename": null, "region_type": "private_memory", "start_va": 196608, "timestamp": "00:02:03.677", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 4096, "start_va": 262144, "type": "region", "version": 1 }, "end_va": 266239, "entry_point": 262144, "filename": "\\Windows\\System32\\apisetschema.dll", "id": "region_752", "name": "apisetschema.dll", "norm_filename": "c:\\windows\\system32\\apisetschema.dll", "region_type": "memory_mapped_file", "start_va": 262144, "timestamp": "00:02:03.677", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000753-addr_0x0000000000050000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_341", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 327680, "type": "region", "version": 1 }, "end_va": 589823, "entry_point": 0, "filename": null, "id": "region_753", "name": "private_0x0000000000050000", "norm_filename": null, "region_type": "private_memory", "start_va": 327680, "timestamp": "00:02:03.677", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000754-addr_0x0000000000090000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_342", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 589824, "type": "region", "version": 1 }, "end_va": 1638399, "entry_point": 0, "filename": null, "id": "region_754", "name": "private_0x0000000000090000", "norm_filename": null, "region_type": "private_memory", "start_va": 589824, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16384, "start_va": 1638400, "type": "region", "version": 1 }, "end_va": 1654783, "entry_point": 0, "filename": null, "id": "region_755", "name": "pagefile_0x0000000000190000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 1638400, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000756-addr_0x0000000000400000-size_0x00000000000b9000-perm_rwx.bin", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_343", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 757760, "start_va": 4194304, "type": "region", "version": 1 }, "end_va": 4952063, "entry_point": 4194304, "filename": "\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe", "id": "region_756", "name": "heidi.exe", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "region_type": "memory_mapped_file", "start_va": 4194304, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1740800, "start_va": 2006450176, "type": "region", "version": 1 }, "end_va": 2008190975, "entry_point": 2006450176, "filename": "\\Windows\\System32\\ntdll.dll", "id": "region_757", "name": "ntdll.dll", "norm_filename": "c:\\windows\\system32\\ntdll.dll", "region_type": "memory_mapped_file", "start_va": 2006450176, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1572864, "start_va": 2008416256, "type": "region", "version": 1 }, "end_va": 2009989119, "entry_point": 2008416256, "filename": "\\Windows\\SysWOW64\\ntdll.dll", "id": "region_758", "name": "ntdll.dll", "norm_filename": "c:\\windows\\syswow64\\ntdll.dll", "region_type": "memory_mapped_file", "start_va": 2008416256, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 143360, "start_va": 2130378752, "type": "region", "version": 1 }, "end_va": 2130522111, "entry_point": 0, "filename": null, "id": "region_759", "name": "pagefile_0x000000007efb0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2130378752, "timestamp": "00:02:03.678", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000760-addr_0x000000007efdb000-size_0x0000000000003000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_344", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 12288, "start_va": 2130554880, "type": "region", "version": 1 }, "end_va": 2130567167, "entry_point": 0, "filename": null, "id": "region_760", "name": "private_0x000000007efdb000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130554880, "timestamp": "00:02:03.679", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000761-addr_0x000000007efde000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_345", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2130567168, "type": "region", "version": 1 }, "end_va": 2130571263, "entry_point": 0, "filename": null, "id": "region_761", "name": "private_0x000000007efde000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130567168, "timestamp": "00:02:03.679", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000762-addr_0x000000007efdf000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_346", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2130571264, "type": "region", "version": 1 }, "end_va": 2130575359, "entry_point": 0, "filename": null, "id": "region_762", "name": "private_0x000000007efdf000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130571264, "timestamp": "00:02:03.679", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16777216, "start_va": 2130575360, "type": "region", "version": 1 }, "end_va": 2147352575, "entry_point": 0, "filename": null, "id": "region_763", "name": "private_0x000000007efe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130575360, "timestamp": "00:02:03.679", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000764-addr_0x000000007ffe0000-size_0x0000000000010000-perm_r.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable" ], "ref_process_dump": { "ref_id": "proc_dump_347", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2147352576, "type": "region", "version": 1 }, "end_va": 2147418111, "entry_point": 0, "filename": null, "id": "region_764", "name": "private_0x000000007ffe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2147352576, "timestamp": "00:02:03.680", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "ignored_region" ], "info": "No dump was created because this is an ignored region", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8793945538560, "start_va": 2147418112, "type": "region", "version": 1 }, "end_va": 8796092956671, "entry_point": 0, "filename": null, "id": "region_765", "name": "private_0x000000007fff0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2147418112, "timestamp": "00:02:03.680", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000766-addr_0x00000000001d0000-size_0x0000000000080000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_348", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 524288, "start_va": 1900544, "type": "region", "version": 1 }, "end_va": 2424831, "entry_point": 0, "filename": null, "id": "region_766", "name": "private_0x00000000001d0000", "norm_filename": null, "region_type": "private_memory", "start_va": 1900544, "timestamp": "00:02:03.688", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 32768, "start_va": 1961820160, "type": "region", "version": 1 }, "end_va": 1961852927, "entry_point": 1961820160, "filename": "\\Windows\\System32\\wow64cpu.dll", "id": "region_767", "name": "wow64cpu.dll", "norm_filename": "c:\\windows\\system32\\wow64cpu.dll", "region_type": "memory_mapped_file", "start_va": 1961820160, "timestamp": "00:02:03.688", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 376832, "start_va": 1961885696, "type": "region", "version": 1 }, "end_va": 1962262527, "entry_point": 1961885696, "filename": "\\Windows\\System32\\wow64win.dll", "id": "region_768", "name": "wow64win.dll", "norm_filename": "c:\\windows\\system32\\wow64win.dll", "region_type": "memory_mapped_file", "start_va": 1961885696, "timestamp": "00:02:03.688", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 258048, "start_va": 1962278912, "type": "region", "version": 1 }, "end_va": 1962536959, "entry_point": 1962278912, "filename": "\\Windows\\System32\\wow64.dll", "id": "region_769", "name": "wow64.dll", "norm_filename": "c:\\windows\\system32\\wow64.dll", "region_type": "memory_mapped_file", "start_va": 1962278912, "timestamp": "00:02:03.688", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000770-addr_0x0000000077760000-size_0x00000000000fa000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_349", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1024000, "start_va": 2004221952, "type": "region", "version": 1 }, "end_va": 2005245951, "entry_point": 0, "filename": null, "id": "region_770", "name": "private_0x0000000077760000", "norm_filename": null, "region_type": "private_memory", "start_va": 2004221952, "timestamp": "00:02:03.689", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000771-addr_0x0000000077860000-size_0x000000000011f000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_350", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1175552, "start_va": 2005270528, "type": "region", "version": 1 }, "end_va": 2006446079, "entry_point": 0, "filename": null, "id": "region_771", "name": "private_0x0000000077860000", "norm_filename": null, "region_type": "private_memory", "start_va": 2005270528, "timestamp": "00:02:03.689", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 65536, "start_va": 65536, "type": "region", "version": 1 }, "end_va": 131071, "entry_point": 0, "filename": null, "id": "region_772", "name": "pagefile_0x0000000000010000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 65536, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000773-addr_0x0000000000280000-size_0x0000000000100000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_351", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 2621440, "type": "region", "version": 1 }, "end_va": 3670015, "entry_point": 0, "filename": null, "id": "region_773", "name": "private_0x0000000000280000", "norm_filename": null, "region_type": "private_memory", "start_va": 2621440, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 421888, "start_va": 3670016, "type": "region", "version": 1 }, "end_va": 4091903, "entry_point": 3670016, "filename": "\\Windows\\System32\\locale.nls", "id": "region_774", "name": "locale.nls", "norm_filename": "c:\\windows\\system32\\locale.nls", "region_type": "memory_mapped_file", "start_va": 3670016, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1114112, "start_va": 1994326016, "type": "region", "version": 1 }, "end_va": 1995440127, "entry_point": 1994326016, "filename": "\\Windows\\SysWOW64\\kernel32.dll", "id": "region_775", "name": "kernel32.dll", "norm_filename": "c:\\windows\\syswow64\\kernel32.dll", "region_type": "memory_mapped_file", "start_va": 1994326016, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 286720, "start_va": 2000486400, "type": "region", "version": 1 }, "end_va": 2000773119, "entry_point": 2000486400, "filename": "\\Windows\\SysWOW64\\KernelBase.dll", "id": "region_776", "name": "kernelbase.dll", "norm_filename": "c:\\windows\\syswow64\\kernelbase.dll", "region_type": "memory_mapped_file", "start_va": 2000486400, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1048576, "start_va": 2130575360, "type": "region", "version": 1 }, "end_va": 2131623935, "entry_point": 0, "filename": null, "id": "region_777", "name": "pagefile_0x000000007efe0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2130575360, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 15728640, "start_va": 2131623936, "type": "region", "version": 1 }, "end_va": 2147352575, "entry_point": 0, "filename": null, "id": "region_778", "name": "private_0x000000007f0e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2131623936, "timestamp": "00:02:03.695", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 540672, "start_va": 1940848640, "type": "region", "version": 1 }, "end_va": 1941389311, "entry_point": 1940848640, "filename": "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll", "id": "region_779", "name": "comctl32.dll", "norm_filename": "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll", "region_type": "memory_mapped_file", "start_va": 1940848640, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 36864, "start_va": 1957560320, "type": "region", "version": 1 }, "end_va": 1957597183, "entry_point": 1957560320, "filename": "\\Windows\\SysWOW64\\version.dll", "id": "region_780", "name": "version.dll", "norm_filename": "c:\\windows\\syswow64\\version.dll", "region_type": "memory_mapped_file", "start_va": 1957560320, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 49152, "start_va": 1969946624, "type": "region", "version": 1 }, "end_va": 1969995775, "entry_point": 1969946624, "filename": "\\Windows\\SysWOW64\\cryptbase.dll", "id": "region_781", "name": "cryptbase.dll", "norm_filename": "c:\\windows\\syswow64\\cryptbase.dll", "region_type": "memory_mapped_file", "start_va": 1969946624, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 393216, "start_va": 1970012160, "type": "region", "version": 1 }, "end_va": 1970405375, "entry_point": 1970012160, "filename": "\\Windows\\SysWOW64\\sspicli.dll", "id": "region_782", "name": "sspicli.dll", "norm_filename": "c:\\windows\\syswow64\\sspicli.dll", "region_type": "memory_mapped_file", "start_va": 1970012160, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 585728, "start_va": 1971257344, "type": "region", "version": 1 }, "end_va": 1971843071, "entry_point": 1971257344, "filename": "\\Windows\\SysWOW64\\oleaut32.dll", "id": "region_783", "name": "oleaut32.dll", "norm_filename": "c:\\windows\\syswow64\\oleaut32.dll", "region_type": "memory_mapped_file", "start_va": 1971257344, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1048576, "start_va": 1972568064, "type": "region", "version": 1 }, "end_va": 1973616639, "entry_point": 1972568064, "filename": "\\Windows\\SysWOW64\\user32.dll", "id": "region_784", "name": "user32.dll", "norm_filename": "c:\\windows\\syswow64\\user32.dll", "region_type": "memory_mapped_file", "start_va": 1972568064, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1425408, "start_va": 1977679872, "type": "region", "version": 1 }, "end_va": 1979105279, "entry_point": 1977679872, "filename": "\\Windows\\SysWOW64\\ole32.dll", "id": "region_785", "name": "ole32.dll", "norm_filename": "c:\\windows\\syswow64\\ole32.dll", "region_type": "memory_mapped_file", "start_va": 1977679872, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 983040, "start_va": 1979777024, "type": "region", "version": 1 }, "end_va": 1980760063, "entry_point": 1979777024, "filename": "\\Windows\\SysWOW64\\rpcrt4.dll", "id": "region_786", "name": "rpcrt4.dll", "norm_filename": "c:\\windows\\syswow64\\rpcrt4.dll", "region_type": "memory_mapped_file", "start_va": 1979777024, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 643072, "start_va": 1993670656, "type": "region", "version": 1 }, "end_va": 1994313727, "entry_point": 1993670656, "filename": "\\Windows\\SysWOW64\\usp10.dll", "id": "region_787", "name": "usp10.dll", "norm_filename": "c:\\windows\\syswow64\\usp10.dll", "region_type": "memory_mapped_file", "start_va": 1993670656, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 40960, "start_va": 1995440128, "type": "region", "version": 1 }, "end_va": 1995481087, "entry_point": 1995440128, "filename": "\\Windows\\SysWOW64\\lpk.dll", "id": "region_788", "name": "lpk.dll", "norm_filename": "c:\\windows\\syswow64\\lpk.dll", "region_type": "memory_mapped_file", "start_va": 1995440128, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 655360, "start_va": 1999831040, "type": "region", "version": 1 }, "end_va": 2000486399, "entry_point": 1999831040, "filename": "\\Windows\\SysWOW64\\advapi32.dll", "id": "region_789", "name": "advapi32.dll", "norm_filename": "c:\\windows\\syswow64\\advapi32.dll", "region_type": "memory_mapped_file", "start_va": 1999831040, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 589824, "start_va": 2000814080, "type": "region", "version": 1 }, "end_va": 2001403903, "entry_point": 2000814080, "filename": "\\Windows\\SysWOW64\\gdi32.dll", "id": "region_790", "name": "gdi32.dll", "norm_filename": "c:\\windows\\syswow64\\gdi32.dll", "region_type": "memory_mapped_file", "start_va": 2000814080, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 704512, "start_va": 2001403904, "type": "region", "version": 1 }, "end_va": 2002108415, "entry_point": 2001403904, "filename": "\\Windows\\SysWOW64\\msvcrt.dll", "id": "region_791", "name": "msvcrt.dll", "norm_filename": "c:\\windows\\syswow64\\msvcrt.dll", "region_type": "memory_mapped_file", "start_va": 2001403904, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 102400, "start_va": 2003828736, "type": "region", "version": 1 }, "end_va": 2003931135, "entry_point": 2003828736, "filename": "\\Windows\\SysWOW64\\sechost.dll", "id": "region_792", "name": "sechost.dll", "norm_filename": "c:\\windows\\syswow64\\sechost.dll", "region_type": "memory_mapped_file", "start_va": 2003828736, "timestamp": "00:02:03.704", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1605632, "start_va": 4980736, "type": "region", "version": 1 }, "end_va": 6586367, "entry_point": 0, "filename": null, "id": "region_793", "name": "pagefile_0x00000000004c0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 4980736, "timestamp": "00:02:03.708", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000794-addr_0x00000000006b0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_352", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 7012352, "type": "region", "version": 1 }, "end_va": 7077887, "entry_point": 0, "filename": null, "id": "region_794", "name": "private_0x00000000006b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 7012352, "timestamp": "00:02:03.709", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 835584, "start_va": 1970405376, "type": "region", "version": 1 }, "end_va": 1971240959, "entry_point": 1970405376, "filename": "\\Windows\\SysWOW64\\msctf.dll", "id": "region_795", "name": "msctf.dll", "norm_filename": "c:\\windows\\syswow64\\msctf.dll", "region_type": "memory_mapped_file", "start_va": 1970405376, "timestamp": "00:02:03.709", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 393216, "start_va": 1973813248, "type": "region", "version": 1 }, "end_va": 1974206463, "entry_point": 1973813248, "filename": "\\Windows\\SysWOW64\\imm32.dll", "id": "region_796", "name": "imm32.dll", "norm_filename": "c:\\windows\\syswow64\\imm32.dll", "region_type": "memory_mapped_file", "start_va": 1973813248, "timestamp": "00:02:03.709", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000797-addr_0x0000000000020000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_353", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 131072, "type": "region", "version": 1 }, "end_va": 135167, "entry_point": 0, "filename": null, "id": "region_797", "name": "private_0x0000000000020000", "norm_filename": null, "region_type": "private_memory", "start_va": 131072, "timestamp": "00:02:03.716", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000798-addr_0x0000000000030000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_354", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 196608, "type": "region", "version": 1 }, "end_va": 200703, "entry_point": 0, "filename": null, "id": "region_798", "name": "private_0x0000000000030000", "norm_filename": null, "region_type": "private_memory", "start_va": 196608, "timestamp": "00:02:03.716", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1576960, "start_va": 7077888, "type": "region", "version": 1 }, "end_va": 8654847, "entry_point": 0, "filename": null, "id": "region_799", "name": "pagefile_0x00000000006c0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 7077888, "timestamp": "00:02:03.716", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 20971520, "start_va": 8716288, "type": "region", "version": 1 }, "end_va": 29687807, "entry_point": 0, "filename": null, "id": "region_800", "name": "pagefile_0x0000000000850000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 8716288, "timestamp": "00:02:03.716", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000801-addr_0x0000000001ce0000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_355", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 30277632, "type": "region", "version": 1 }, "end_va": 30343167, "entry_point": 0, "filename": null, "id": "region_801", "name": "private_0x0000000001ce0000", "norm_filename": null, "region_type": "private_memory", "start_va": 30277632, "timestamp": "00:02:03.717", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000802-addr_0x0000000001cf0000-size_0x0000000000100000-perm_.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "" ], "ref_process_dump": { "ref_id": "proc_dump_356", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1048576, "start_va": 30343168, "type": "region", "version": 1 }, "end_va": 31391743, "entry_point": 0, "filename": null, "id": "region_802", "name": "private_0x0000000001cf0000", "norm_filename": null, "region_type": "private_memory", "start_va": 30343168, "timestamp": "00:02:03.719", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 524288, "start_va": 1961230336, "type": "region", "version": 1 }, "end_va": 1961754623, "entry_point": 1961230336, "filename": "\\Windows\\SysWOW64\\uxtheme.dll", "id": "region_803", "name": "uxtheme.dll", "norm_filename": "c:\\windows\\syswow64\\uxtheme.dll", "region_type": "memory_mapped_file", "start_va": 1961230336, "timestamp": "00:02:03.728", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000804-addr_0x0000000001df0000-size_0x0000000000200000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_357", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 2097152, "start_va": 31391744, "type": "region", "version": 1 }, "end_va": 33488895, "entry_point": 0, "filename": null, "id": "region_804", "name": "private_0x0000000001df0000", "norm_filename": null, "region_type": "private_memory", "start_va": 31391744, "timestamp": "00:02:03.729", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 913408, "start_va": 31391744, "type": "region", "version": 1 }, "end_va": 32305151, "entry_point": 0, "filename": null, "id": "region_805", "name": "pagefile_0x0000000001df0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 31391744, "timestamp": "00:02:03.731", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000806-addr_0x0000000001fb0000-size_0x0000000000040000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_358", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 262144, "start_va": 33226752, "type": "region", "version": 1 }, "end_va": 33488895, "entry_point": 0, "filename": null, "id": "region_806", "name": "private_0x0000000001fb0000", "norm_filename": null, "region_type": "private_memory", "start_va": 33226752, "timestamp": "00:02:03.732", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000807-addr_0x00000000001a0000-size_0x0000000000001000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_359", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 1703936, "type": "region", "version": 1 }, "end_va": 1708031, "entry_point": 0, "filename": null, "id": "region_807", "name": "private_0x00000000001a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 1703936, "timestamp": "00:02:03.737", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 77824, "start_va": 1961099264, "type": "region", "version": 1 }, "end_va": 1961177087, "entry_point": 1961099264, "filename": "\\Windows\\SysWOW64\\dwmapi.dll", "id": "region_808", "name": "dwmapi.dll", "norm_filename": "c:\\windows\\syswow64\\dwmapi.dll", "region_type": "memory_mapped_file", "start_va": 1961099264, "timestamp": "00:02:03.739", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000809-addr_0x0000000001ff0000-size_0x0000000000170000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_360", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 1507328, "start_va": 33488896, "type": "region", "version": 1 }, "end_va": 34996223, "entry_point": 0, "filename": null, "id": "region_809", "name": "private_0x0000000001ff0000", "norm_filename": null, "region_type": "private_memory", "start_va": 33488896, "timestamp": "00:02:03.741", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 9633792, "start_va": 34996224, "type": "region", "version": 1 }, "end_va": 44630015, "entry_point": 34996224, "filename": "\\Windows\\Fonts\\StaticCache.dat", "id": "region_810", "name": "staticcache.dat", "norm_filename": "c:\\windows\\fonts\\staticcache.dat", "region_type": "memory_mapped_file", "start_va": 34996224, "timestamp": "00:02:03.745", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 28672, "start_va": 1769472, "type": "region", "version": 1 }, "end_va": 1798143, "entry_point": 0, "filename": null, "id": "region_811", "name": "pagefile_0x00000000001b0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 1769472, "timestamp": "00:02:03.753", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 8192, "start_va": 1835008, "type": "region", "version": 1 }, "end_va": 1843199, "entry_point": 0, "filename": null, "id": "region_812", "name": "pagefile_0x00000000001c0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 1835008, "timestamp": "00:02:03.753", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4141056, "start_va": 44630016, "type": "region", "version": 1 }, "end_va": 48771071, "entry_point": 0, "filename": null, "id": "region_813", "name": "pagefile_0x0000000002a90000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 44630016, "timestamp": "00:02:03.754", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 102400, "start_va": 1965490176, "type": "region", "version": 1 }, "end_va": 1965592575, "entry_point": 1965490176, "filename": "\\Windows\\SysWOW64\\olepro32.dll", "id": "region_814", "name": "olepro32.dll", "norm_filename": "c:\\windows\\syswow64\\olepro32.dll", "region_type": "memory_mapped_file", "start_va": 1965490176, "timestamp": "00:02:03.764", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000815-addr_0x0000000000250000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_361", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2424832, "type": "region", "version": 1 }, "end_va": 2428927, "entry_point": 0, "filename": null, "id": "region_815", "name": "private_0x0000000000250000", "norm_filename": null, "region_type": "private_memory", "start_va": 2424832, "timestamp": "00:02:13.190", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 12886016, "start_va": 1980760064, "type": "region", "version": 1 }, "end_va": 1993646079, "entry_point": 1980760064, "filename": "\\Windows\\SysWOW64\\shell32.dll", "id": "region_816", "name": "shell32.dll", "norm_filename": "c:\\windows\\syswow64\\shell32.dll", "region_type": "memory_mapped_file", "start_va": 1980760064, "timestamp": "00:02:13.190", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 356352, "start_va": 1995505664, "type": "region", "version": 1 }, "end_va": 1995862015, "entry_point": 1995505664, "filename": "\\Windows\\SysWOW64\\shlwapi.dll", "id": "region_817", "name": "shlwapi.dll", "norm_filename": "c:\\windows\\syswow64\\shlwapi.dll", "region_type": "memory_mapped_file", "start_va": 1995505664, "timestamp": "00:02:13.191", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000818-addr_0x0000000000260000-size_0x0000000000001000-perm_rwx.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": { "ref_id": "proc_dump_362", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2490368, "type": "region", "version": 1 }, "end_va": 2494463, "entry_point": 0, "filename": null, "id": "region_818", "name": "private_0x0000000000260000", "norm_filename": null, "region_type": "private_memory", "start_va": 2490368, "timestamp": "00:02:13.193", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000819-addr_0x0000000000650000-size_0x0000000000011000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_363", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 69632, "start_va": 6619136, "type": "region", "version": 1 }, "end_va": 6688767, "entry_point": 0, "filename": null, "id": "region_819", "name": "private_0x0000000000650000", "norm_filename": null, "region_type": "private_memory", "start_va": 6619136, "timestamp": "00:02:13.193", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000820-addr_0x0000000000270000-size_0x0000000000010000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_364", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 65536, "start_va": 2555904, "type": "region", "version": 1 }, "end_va": 2621439, "entry_point": 0, "filename": null, "id": "region_820", "name": "private_0x0000000000270000", "norm_filename": null, "region_type": "private_memory", "start_va": 2555904, "timestamp": "00:02:13.194", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 28672, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4157439, "entry_point": 0, "filename": null, "id": "region_821", "name": "pagefile_0x00000000003f0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 4128768, "timestamp": "00:02:13.195", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 28672, "start_va": 2555904, "type": "region", "version": 1 }, "end_va": 2584575, "entry_point": 0, "filename": null, "id": "region_822", "name": "pagefile_0x0000000000270000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2555904, "timestamp": "00:02:13.195", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000874-addr_0x0000000000270000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_365", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 2555904, "type": "region", "version": 1 }, "end_va": 2559999, "entry_point": 0, "filename": null, "id": "region_874", "name": "private_0x0000000000270000", "norm_filename": null, "region_type": "private_memory", "start_va": 2555904, "timestamp": "00:02:13.214", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000875-addr_0x0000000000670000-size_0x000000000003d000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_366", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 249856, "start_va": 6750208, "type": "region", "version": 1 }, "end_va": 7000063, "entry_point": 0, "filename": null, "id": "region_875", "name": "private_0x0000000000670000", "norm_filename": null, "region_type": "private_memory", "start_va": 6750208, "timestamp": "00:02:13.215", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000876-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_367", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_876", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.215", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000877-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_368", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_877", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.216", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000878-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_369", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_878", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.217", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000879-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_370", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_879", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.217", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000880-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_371", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_880", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.218", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000881-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_372", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_881", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.219", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000882-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_373", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_882", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.219", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000883-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_374", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_883", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.220", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000884-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_375", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_884", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.220", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000885-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_376", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_885", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.221", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000886-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_377", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_886", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.222", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000887-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_378", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_887", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.222", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000888-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_379", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_888", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.223", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000889-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_380", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_889", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.224", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000890-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_381", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_890", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.224", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000891-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_382", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_891", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.225", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000892-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_383", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_892", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.226", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000893-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_384", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_893", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.226", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000894-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_385", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_894", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.227", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000895-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_386", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_895", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.227", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000896-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_387", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_896", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.228", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000897-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_388", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_897", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.229", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000898-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_389", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_898", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.229", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000899-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_390", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_899", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.232", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000900-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_391", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_900", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.232", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000901-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_392", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_901", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.233", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000902-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_393", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_902", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.234", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000903-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_394", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_903", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.234", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000904-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_395", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_904", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.235", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000905-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_396", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_905", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.235", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000906-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_397", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_906", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.236", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000907-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_398", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_907", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.237", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000908-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_399", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_908", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.237", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000909-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_400", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_909", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.238", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000910-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_401", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_910", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.239", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000911-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_402", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_911", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.239", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000912-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_403", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_912", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.240", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000913-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_404", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_913", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.240", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000914-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_405", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_914", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.241", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000915-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_406", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_915", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.242", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000916-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_407", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_916", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.242", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000917-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_408", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_917", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.243", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000918-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_409", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_918", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.243", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000919-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_410", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_919", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.244", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000920-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_411", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_920", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.245", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000921-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_412", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_921", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.245", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000922-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_413", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_922", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.246", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000923-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_414", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_923", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.247", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000924-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_415", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_924", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.247", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000925-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_416", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_925", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.248", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000926-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_417", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_926", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.248", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000927-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_418", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_927", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.250", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000928-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_419", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_928", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.250", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000929-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_420", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_929", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.251", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000930-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_421", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_930", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.253", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000931-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_422", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_931", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.253", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000932-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_423", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_932", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.254", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000933-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_424", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_933", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.255", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000934-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_425", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_934", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.255", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000935-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_426", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_935", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.256", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000936-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_427", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_936", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.256", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000937-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_428", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_937", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.257", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000938-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_429", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_938", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.258", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000939-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_430", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_939", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.258", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000940-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_431", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_940", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.259", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000941-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_432", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_941", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.260", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000942-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_433", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_942", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.260", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000943-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_434", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_943", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.261", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000944-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_435", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_944", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.261", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000945-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_436", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_945", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.262", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000946-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_437", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_946", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.263", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000947-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_438", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_947", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.263", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000948-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_439", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_948", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.264", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000949-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_440", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_949", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.264", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000950-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_441", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_950", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.265", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000951-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_442", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_951", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.266", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000952-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_443", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_952", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.266", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000953-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_444", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_953", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.267", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000954-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_445", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_954", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.268", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000955-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_446", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_955", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.268", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000956-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_447", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_956", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.269", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000957-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_448", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_957", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.269", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000958-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_449", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_958", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.270", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000959-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_450", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_959", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.271", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000960-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_451", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_960", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.271", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000961-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_452", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_961", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.272", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000962-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_453", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_962", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.272", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000963-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_454", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_963", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.273", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000964-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_455", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_964", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.274", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000965-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_456", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_965", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.274", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000966-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_457", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_966", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.275", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000967-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_458", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_967", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.275", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000968-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_459", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_968", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.276", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000969-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_460", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_969", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.277", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000970-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_461", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_970", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.277", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000971-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_462", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_971", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.278", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000972-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_463", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_972", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.279", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000973-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_464", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_973", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.279", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000974-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_465", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_974", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.280", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000975-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_466", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_975", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.280", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000976-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_467", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_976", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.281", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000977-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_468", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_977", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.282", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000978-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_469", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_978", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.282", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000979-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_470", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_979", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.283", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000980-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_471", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_980", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.284", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000981-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_472", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_981", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.284", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000982-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_473", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_982", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.285", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000983-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_474", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_983", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.286", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000984-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_475", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_984", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.286", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000985-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_476", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_985", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.287", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000986-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_477", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_986", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.287", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000987-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_478", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_987", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.288", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000988-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_479", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_988", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.289", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000989-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_480", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_989", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.289", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000990-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_481", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_990", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.290", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000991-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_482", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_991", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.291", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000992-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_483", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_992", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.291", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000993-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_484", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_993", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.292", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000994-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_485", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_994", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.292", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000995-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_486", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_995", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.293", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000996-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_487", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_996", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.294", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000997-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_488", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_997", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.294", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000998-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_489", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_998", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.295", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00000999-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_490", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_999", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.296", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001000-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_491", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1000", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.297", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001001-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_492", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1001", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.297", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001002-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_493", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1002", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.298", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001003-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_494", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1003", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.299", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001004-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_495", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1004", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.299", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001005-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_496", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1005", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.300", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001006-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_497", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1006", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.300", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001007-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_498", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1007", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.301", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001008-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_499", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1008", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.302", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001009-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_500", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1009", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.302", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001010-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_501", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1010", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.303", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001011-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_502", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1011", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.304", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001012-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_503", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1012", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.304", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001013-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_504", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1013", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.305", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001014-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_505", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1014", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.306", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001015-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_506", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1015", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.306", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001016-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_507", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1016", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.307", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001017-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_508", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1017", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.308", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001018-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_509", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1018", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.308", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001019-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_510", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1019", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.309", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001020-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_511", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1020", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.310", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001021-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_512", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1021", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.310", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001022-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_513", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1022", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.311", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001023-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_514", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1023", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.311", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001024-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_515", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1024", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.312", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001025-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_516", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1025", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.313", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001026-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_517", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1026", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.313", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001027-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_518", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1027", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.314", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001028-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_519", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1028", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.315", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001029-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_520", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1029", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.315", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001030-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_521", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1030", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.316", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001031-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_522", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1031", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.316", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001032-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_523", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1032", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.319", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001033-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_524", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1033", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.319", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001034-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_525", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1034", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.320", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001035-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_526", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1035", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.321", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001036-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_527", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1036", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.321", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001037-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_528", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1037", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.322", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001038-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_529", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1038", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.322", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001039-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_530", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1039", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.323", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001040-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_531", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1040", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.324", "type": "region", "version": 1 }, { "dump": { "filename": "process_00000003-region_00001041-addr_0x00000000003f0000-size_0x0000000000001000-perm_rw.bin", "flags": [ "dumped" ], "info": "Region dumped", "permissions": [ "readable", "writable" ], "ref_process_dump": { "ref_id": "proc_dump_532", "ref_source": "summary", "ref_type": "process_dump", "type": "reference", "version": 1 }, "size": 4096, "start_va": 4128768, "type": "region", "version": 1 }, "end_va": 4132863, "entry_point": 0, "filename": null, "id": "region_1041", "name": "private_0x00000000003f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4128768, "timestamp": "00:02:13.324", "type": "region", "version": 1 } ], "terminate_reason": "terminated", "type": "monitored_process", "unmonitor_reason": "terminated_by_timeout", "version": 1 }, { "cmd_line": "\"C:\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe\" ", "filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "id": "proc_4", "image_name": "heidi.exe", "monitor_reason": "child_process", "monitored_id": 4, "origin_monitor_id": 3, "ref_parent_process": { "ref_id": "proc_3", "ref_source": "summary", "ref_type": "monitored_process", "type": "reference", "version": 1 }, "regions": [ { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 131072, "start_va": 65536, "type": "region", "version": 1 }, "end_va": 196607, "entry_point": 0, "filename": null, "id": "region_1113", "name": "private_0x0000000000010000", "norm_filename": null, "region_type": "private_memory", "start_va": 65536, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 8192, "start_va": 196608, "type": "region", "version": 1 }, "end_va": 204799, "entry_point": 0, "filename": null, "id": "region_1114", "name": "private_0x0000000000030000", "norm_filename": null, "region_type": "private_memory", "start_va": 196608, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 4096, "start_va": 262144, "type": "region", "version": 1 }, "end_va": 266239, "entry_point": 262144, "filename": "\\Windows\\System32\\apisetschema.dll", "id": "region_1115", "name": "apisetschema.dll", "norm_filename": "c:\\windows\\system32\\apisetschema.dll", "region_type": "memory_mapped_file", "start_va": 262144, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 327680, "type": "region", "version": 1 }, "end_va": 589823, "entry_point": 0, "filename": null, "id": "region_1116", "name": "private_0x0000000000050000", "norm_filename": null, "region_type": "private_memory", "start_va": 327680, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 589824, "type": "region", "version": 1 }, "end_va": 1638399, "entry_point": 0, "filename": null, "id": "region_1117", "name": "private_0x0000000000090000", "norm_filename": null, "region_type": "private_memory", "start_va": 589824, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16384, "start_va": 1638400, "type": "region", "version": 1 }, "end_va": 1654783, "entry_point": 0, "filename": null, "id": "region_1118", "name": "pagefile_0x0000000000190000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 1638400, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 757760, "start_va": 4194304, "type": "region", "version": 1 }, "end_va": 4952063, "entry_point": 4194304, "filename": "\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe", "id": "region_1119", "name": "heidi.exe", "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe", "region_type": "memory_mapped_file", "start_va": 4194304, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1740800, "start_va": 2006450176, "type": "region", "version": 1 }, "end_va": 2008190975, "entry_point": 2006450176, "filename": "\\Windows\\System32\\ntdll.dll", "id": "region_1120", "name": "ntdll.dll", "norm_filename": "c:\\windows\\system32\\ntdll.dll", "region_type": "memory_mapped_file", "start_va": 2006450176, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1572864, "start_va": 2008416256, "type": "region", "version": 1 }, "end_va": 2009989119, "entry_point": 2008416256, "filename": "\\Windows\\SysWOW64\\ntdll.dll", "id": "region_1121", "name": "ntdll.dll", "norm_filename": "c:\\windows\\syswow64\\ntdll.dll", "region_type": "memory_mapped_file", "start_va": 2008416256, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 143360, "start_va": 2130378752, "type": "region", "version": 1 }, "end_va": 2130522111, "entry_point": 0, "filename": null, "id": "region_1122", "name": "pagefile_0x000000007efb0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2130378752, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 12288, "start_va": 2130554880, "type": "region", "version": 1 }, "end_va": 2130567167, "entry_point": 0, "filename": null, "id": "region_1123", "name": "private_0x000000007efdb000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130554880, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 2130567168, "type": "region", "version": 1 }, "end_va": 2130571263, "entry_point": 0, "filename": null, "id": "region_1124", "name": "private_0x000000007efde000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130567168, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 2130571264, "type": "region", "version": 1 }, "end_va": 2130575359, "entry_point": 0, "filename": null, "id": "region_1125", "name": "private_0x000000007efdf000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130571264, "timestamp": "00:02:13.363", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 16777216, "start_va": 2130575360, "type": "region", "version": 1 }, "end_va": 2147352575, "entry_point": 0, "filename": null, "id": "region_1126", "name": "private_0x000000007efe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130575360, "timestamp": "00:02:13.364", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable" ], "ref_process_dump": null, "size": 65536, "start_va": 2147352576, "type": "region", "version": 1 }, "end_va": 2147418111, "entry_point": 0, "filename": null, "id": "region_1127", "name": "private_0x000000007ffe0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2147352576, "timestamp": "00:02:13.364", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "ignored_region" ], "info": "No dump was created because this is an ignored region", "permissions": [ "readable" ], "ref_process_dump": null, "size": 8793945538560, "start_va": 2147418112, "type": "region", "version": 1 }, "end_va": 8796092956671, "entry_point": 0, "filename": null, "id": "region_1128", "name": "private_0x000000007fff0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2147418112, "timestamp": "00:02:13.364", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 663552, "start_va": 4194304, "type": "region", "version": 1 }, "end_va": 4857855, "entry_point": 0, "filename": null, "id": "region_1130", "name": "pagefile_0x0000000000400000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 4194304, "timestamp": "00:02:13.364", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 4096, "start_va": 1703936, "type": "region", "version": 1 }, "end_va": 1708031, "entry_point": 0, "filename": null, "id": "region_1131", "name": "pagefile_0x00000000001a0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 1703936, "timestamp": "00:02:13.365", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 524288, "start_va": 2490368, "type": "region", "version": 1 }, "end_va": 3014655, "entry_point": 0, "filename": null, "id": "region_1133", "name": "private_0x0000000000260000", "norm_filename": null, "region_type": "private_memory", "start_va": 2490368, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 32768, "start_va": 1961820160, "type": "region", "version": 1 }, "end_va": 1961852927, "entry_point": 1961820160, "filename": "\\Windows\\System32\\wow64cpu.dll", "id": "region_1134", "name": "wow64cpu.dll", "norm_filename": "c:\\windows\\system32\\wow64cpu.dll", "region_type": "memory_mapped_file", "start_va": 1961820160, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 376832, "start_va": 1961885696, "type": "region", "version": 1 }, "end_va": 1962262527, "entry_point": 1961885696, "filename": "\\Windows\\System32\\wow64win.dll", "id": "region_1135", "name": "wow64win.dll", "norm_filename": "c:\\windows\\system32\\wow64win.dll", "region_type": "memory_mapped_file", "start_va": 1961885696, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 258048, "start_va": 1962278912, "type": "region", "version": 1 }, "end_va": 1962536959, "entry_point": 1962278912, "filename": "\\Windows\\System32\\wow64.dll", "id": "region_1136", "name": "wow64.dll", "norm_filename": "c:\\windows\\system32\\wow64.dll", "region_type": "memory_mapped_file", "start_va": 1962278912, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1024000, "start_va": 2004221952, "type": "region", "version": 1 }, "end_va": 2005245951, "entry_point": 0, "filename": null, "id": "region_1137", "name": "private_0x0000000077760000", "norm_filename": null, "region_type": "private_memory", "start_va": 2004221952, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1175552, "start_va": 2005270528, "type": "region", "version": 1 }, "end_va": 2006446079, "entry_point": 0, "filename": null, "id": "region_1138", "name": "private_0x0000000077860000", "norm_filename": null, "region_type": "private_memory", "start_va": 2005270528, "timestamp": "00:02:13.371", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 65536, "start_va": 65536, "type": "region", "version": 1 }, "end_va": 131071, "entry_point": 0, "filename": null, "id": "region_1139", "name": "pagefile_0x0000000000010000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 65536, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 421888, "start_va": 1769472, "type": "region", "version": 1 }, "end_va": 2191359, "entry_point": 1769472, "filename": "\\Windows\\System32\\locale.nls", "id": "region_1140", "name": "locale.nls", "norm_filename": "c:\\windows\\system32\\locale.nls", "region_type": "memory_mapped_file", "start_va": 1769472, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 65536, "start_va": 3473408, "type": "region", "version": 1 }, "end_va": 3538943, "entry_point": 0, "filename": null, "id": "region_1141", "name": "private_0x0000000000350000", "norm_filename": null, "region_type": "private_memory", "start_va": 3473408, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 5636096, "type": "region", "version": 1 }, "end_va": 6684671, "entry_point": 0, "filename": null, "id": "region_1142", "name": "private_0x0000000000560000", "norm_filename": null, "region_type": "private_memory", "start_va": 5636096, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 49152, "start_va": 1969946624, "type": "region", "version": 1 }, "end_va": 1969995775, "entry_point": 1969946624, "filename": "\\Windows\\SysWOW64\\cryptbase.dll", "id": "region_1143", "name": "cryptbase.dll", "norm_filename": "c:\\windows\\syswow64\\cryptbase.dll", "region_type": "memory_mapped_file", "start_va": 1969946624, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 393216, "start_va": 1970012160, "type": "region", "version": 1 }, "end_va": 1970405375, "entry_point": 1970012160, "filename": "\\Windows\\SysWOW64\\sspicli.dll", "id": "region_1144", "name": "sspicli.dll", "norm_filename": "c:\\windows\\syswow64\\sspicli.dll", "region_type": "memory_mapped_file", "start_va": 1970012160, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 585728, "start_va": 1971257344, "type": "region", "version": 1 }, "end_va": 1971843071, "entry_point": 1971257344, "filename": "\\Windows\\SysWOW64\\oleaut32.dll", "id": "region_1145", "name": "oleaut32.dll", "norm_filename": "c:\\windows\\syswow64\\oleaut32.dll", "region_type": "memory_mapped_file", "start_va": 1971257344, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1048576, "start_va": 1972568064, "type": "region", "version": 1 }, "end_va": 1973616639, "entry_point": 1972568064, "filename": "\\Windows\\SysWOW64\\user32.dll", "id": "region_1146", "name": "user32.dll", "norm_filename": "c:\\windows\\syswow64\\user32.dll", "region_type": "memory_mapped_file", "start_va": 1972568064, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1425408, "start_va": 1977679872, "type": "region", "version": 1 }, "end_va": 1979105279, "entry_point": 1977679872, "filename": "\\Windows\\SysWOW64\\ole32.dll", "id": "region_1147", "name": "ole32.dll", "norm_filename": "c:\\windows\\syswow64\\ole32.dll", "region_type": "memory_mapped_file", "start_va": 1977679872, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 983040, "start_va": 1979777024, "type": "region", "version": 1 }, "end_va": 1980760063, "entry_point": 1979777024, "filename": "\\Windows\\SysWOW64\\rpcrt4.dll", "id": "region_1148", "name": "rpcrt4.dll", "norm_filename": "c:\\windows\\syswow64\\rpcrt4.dll", "region_type": "memory_mapped_file", "start_va": 1979777024, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 643072, "start_va": 1993670656, "type": "region", "version": 1 }, "end_va": 1994313727, "entry_point": 1993670656, "filename": "\\Windows\\SysWOW64\\usp10.dll", "id": "region_1149", "name": "usp10.dll", "norm_filename": "c:\\windows\\syswow64\\usp10.dll", "region_type": "memory_mapped_file", "start_va": 1993670656, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1114112, "start_va": 1994326016, "type": "region", "version": 1 }, "end_va": 1995440127, "entry_point": 1994326016, "filename": "\\Windows\\SysWOW64\\kernel32.dll", "id": "region_1150", "name": "kernel32.dll", "norm_filename": "c:\\windows\\syswow64\\kernel32.dll", "region_type": "memory_mapped_file", "start_va": 1994326016, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 40960, "start_va": 1995440128, "type": "region", "version": 1 }, "end_va": 1995481087, "entry_point": 1995440128, "filename": "\\Windows\\SysWOW64\\lpk.dll", "id": "region_1151", "name": "lpk.dll", "norm_filename": "c:\\windows\\syswow64\\lpk.dll", "region_type": "memory_mapped_file", "start_va": 1995440128, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 655360, "start_va": 1999831040, "type": "region", "version": 1 }, "end_va": 2000486399, "entry_point": 1999831040, "filename": "\\Windows\\SysWOW64\\advapi32.dll", "id": "region_1152", "name": "advapi32.dll", "norm_filename": "c:\\windows\\syswow64\\advapi32.dll", "region_type": "memory_mapped_file", "start_va": 1999831040, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 286720, "start_va": 2000486400, "type": "region", "version": 1 }, "end_va": 2000773119, "entry_point": 2000486400, "filename": "\\Windows\\SysWOW64\\KernelBase.dll", "id": "region_1153", "name": "kernelbase.dll", "norm_filename": "c:\\windows\\syswow64\\kernelbase.dll", "region_type": "memory_mapped_file", "start_va": 2000486400, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 589824, "start_va": 2000814080, "type": "region", "version": 1 }, "end_va": 2001403903, "entry_point": 2000814080, "filename": "\\Windows\\SysWOW64\\gdi32.dll", "id": "region_1154", "name": "gdi32.dll", "norm_filename": "c:\\windows\\syswow64\\gdi32.dll", "region_type": "memory_mapped_file", "start_va": 2000814080, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 704512, "start_va": 2001403904, "type": "region", "version": 1 }, "end_va": 2002108415, "entry_point": 2001403904, "filename": "\\Windows\\SysWOW64\\msvcrt.dll", "id": "region_1155", "name": "msvcrt.dll", "norm_filename": "c:\\windows\\syswow64\\msvcrt.dll", "region_type": "memory_mapped_file", "start_va": 2001403904, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 102400, "start_va": 2003828736, "type": "region", "version": 1 }, "end_va": 2003931135, "entry_point": 2003828736, "filename": "\\Windows\\SysWOW64\\sechost.dll", "id": "region_1156", "name": "sechost.dll", "norm_filename": "c:\\windows\\syswow64\\sechost.dll", "region_type": "memory_mapped_file", "start_va": 2003828736, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 217088, "start_va": 2003959808, "type": "region", "version": 1 }, "end_va": 2004176895, "entry_point": 2003959808, "filename": "\\Windows\\SysWOW64\\ws2_32.dll", "id": "region_1157", "name": "ws2_32.dll", "norm_filename": "c:\\windows\\syswow64\\ws2_32.dll", "region_type": "memory_mapped_file", "start_va": 2003959808, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 24576, "start_va": 2008219648, "type": "region", "version": 1 }, "end_va": 2008244223, "entry_point": 2008219648, "filename": "\\Windows\\SysWOW64\\nsi.dll", "id": "region_1158", "name": "nsi.dll", "norm_filename": "c:\\windows\\syswow64\\nsi.dll", "region_type": "memory_mapped_file", "start_va": 2008219648, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1048576, "start_va": 2130575360, "type": "region", "version": 1 }, "end_va": 2131623935, "entry_point": 0, "filename": null, "id": "region_1159", "name": "pagefile_0x000000007efe0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2130575360, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 15728640, "start_va": 2131623936, "type": "region", "version": 1 }, "end_va": 2147352575, "entry_point": 0, "filename": null, "id": "region_1160", "name": "private_0x000000007f0e0000", "norm_filename": null, "region_type": "private_memory", "start_va": 2131623936, "timestamp": "00:02:13.385", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1605632, "start_va": 6684672, "type": "region", "version": 1 }, "end_va": 8290303, "entry_point": 0, "filename": null, "id": "region_1161", "name": "pagefile_0x0000000000660000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 6684672, "timestamp": "00:02:13.397", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 835584, "start_va": 1970405376, "type": "region", "version": 1 }, "end_va": 1971240959, "entry_point": 1970405376, "filename": "\\Windows\\SysWOW64\\msctf.dll", "id": "region_1162", "name": "msctf.dll", "norm_filename": "c:\\windows\\syswow64\\msctf.dll", "region_type": "memory_mapped_file", "start_va": 1970405376, "timestamp": "00:02:13.397", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 393216, "start_va": 1973813248, "type": "region", "version": 1 }, "end_va": 1974206463, "entry_point": 1973813248, "filename": "\\Windows\\SysWOW64\\imm32.dll", "id": "region_1163", "name": "imm32.dll", "norm_filename": "c:\\windows\\syswow64\\imm32.dll", "region_type": "memory_mapped_file", "start_va": 1973813248, "timestamp": "00:02:13.397", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 131072, "type": "region", "version": 1 }, "end_va": 135167, "entry_point": 0, "filename": null, "id": "region_1164", "name": "private_0x0000000000020000", "norm_filename": null, "region_type": "private_memory", "start_va": 131072, "timestamp": "00:02:13.401", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 196608, "type": "region", "version": 1 }, "end_va": 200703, "entry_point": 0, "filename": null, "id": "region_1165", "name": "private_0x0000000000030000", "norm_filename": null, "region_type": "private_memory", "start_va": 196608, "timestamp": "00:02:13.401", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 1576960, "start_va": 8323072, "type": "region", "version": 1 }, "end_va": 9900031, "entry_point": 0, "filename": null, "id": "region_1166", "name": "pagefile_0x00000000007f0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 8323072, "timestamp": "00:02:13.401", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "region_too_big" ], "info": "No dump was created because region size surpasses maximum region dump size of the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 20971520, "start_va": 9961472, "type": "region", "version": 1 }, "end_va": 30932991, "entry_point": 0, "filename": null, "id": "region_1167", "name": "pagefile_0x0000000000980000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 9961472, "timestamp": "00:02:13.401", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 12886016, "start_va": 1980760064, "type": "region", "version": 1 }, "end_va": 1993646079, "entry_point": 1980760064, "filename": "\\Windows\\SysWOW64\\shell32.dll", "id": "region_1168", "name": "shell32.dll", "norm_filename": "c:\\windows\\syswow64\\shell32.dll", "region_type": "memory_mapped_file", "start_va": 1980760064, "timestamp": "00:02:13.401", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 356352, "start_va": 1995505664, "type": "region", "version": 1 }, "end_va": 1995862015, "entry_point": 1995505664, "filename": "\\Windows\\SysWOW64\\shlwapi.dll", "id": "region_1169", "name": "shlwapi.dll", "norm_filename": "c:\\windows\\syswow64\\shlwapi.dll", "region_type": "memory_mapped_file", "start_va": 1995505664, "timestamp": "00:02:13.402", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 2945024, "start_va": 30932992, "type": "region", "version": 1 }, "end_va": 33878015, "entry_point": 30932992, "filename": "\\Windows\\Globalization\\Sorting\\SortDefault.nls", "id": "region_1170", "name": "sortdefault.nls", "norm_filename": "c:\\windows\\globalization\\sorting\\sortdefault.nls", "region_type": "memory_mapped_file", "start_va": 30932992, "timestamp": "00:02:13.406", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 90112, "start_va": 1968766976, "type": "region", "version": 1 }, "end_va": 1968857087, "entry_point": 1968766976, "filename": "\\Windows\\SysWOW64\\cryptsp.dll", "id": "region_1171", "name": "cryptsp.dll", "norm_filename": "c:\\windows\\syswow64\\cryptsp.dll", "region_type": "memory_mapped_file", "start_va": 1968766976, "timestamp": "00:02:13.414", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 245760, "start_va": 2228224, "type": "region", "version": 1 }, "end_va": 2473983, "entry_point": 2228224, "filename": "\\Windows\\SysWOW64\\rsaenh.dll", "id": "region_1172", "name": "rsaenh.dll", "norm_filename": "c:\\windows\\syswow64\\rsaenh.dll", "region_type": "memory_mapped_file", "start_va": 2228224, "timestamp": "00:02:13.415", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 241664, "start_va": 1968504832, "type": "region", "version": 1 }, "end_va": 1968746495, "entry_point": 1968504832, "filename": "\\Windows\\SysWOW64\\rsaenh.dll", "id": "region_1177", "name": "rsaenh.dll", "norm_filename": "c:\\windows\\syswow64\\rsaenh.dll", "region_type": "memory_mapped_file", "start_va": 1968504832, "timestamp": "00:02:13.421", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1789952, "start_va": 1966669824, "type": "region", "version": 1 }, "end_va": 1968459775, "entry_point": 1966669824, "filename": "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", "id": "region_1178", "name": "nss3.dll", "norm_filename": "c:\\program files (x86)\\mozilla firefox\\nss3.dll", "region_type": "memory_mapped_file", "start_va": 1966669824, "timestamp": "00:02:13.484", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 204800, "start_va": 1966407680, "type": "region", "version": 1 }, "end_va": 1966612479, "entry_point": 1966407680, "filename": "\\Windows\\SysWOW64\\winmm.dll", "id": "region_1179", "name": "winmm.dll", "norm_filename": "c:\\windows\\syswow64\\winmm.dll", "region_type": "memory_mapped_file", "start_va": 1966407680, "timestamp": "00:02:13.610", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 28672, "start_va": 1966342144, "type": "region", "version": 1 }, "end_va": 1966370815, "entry_point": 1966342144, "filename": "\\Windows\\SysWOW64\\wsock32.dll", "id": "region_1180", "name": "wsock32.dll", "norm_filename": "c:\\windows\\syswow64\\wsock32.dll", "region_type": "memory_mapped_file", "start_va": 1966342144, "timestamp": "00:02:13.629", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 782336, "start_va": 1965555712, "type": "region", "version": 1 }, "end_va": 1966338047, "entry_point": 1965555712, "filename": "\\Windows\\SysWOW64\\msvcr100.dll", "id": "region_1181", "name": "msvcr100.dll", "norm_filename": "c:\\windows\\syswow64\\msvcr100.dll", "region_type": "memory_mapped_file", "start_va": 1965555712, "timestamp": "00:02:13.662", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 139264, "start_va": 1965359104, "type": "region", "version": 1 }, "end_va": 1965498367, "entry_point": 1965359104, "filename": "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll", "id": "region_1182", "name": "mozglue.dll", "norm_filename": "c:\\program files (x86)\\mozilla firefox\\mozglue.dll", "region_type": "memory_mapped_file", "start_va": 1965359104, "timestamp": "00:02:13.829", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 430080, "start_va": 1964900352, "type": "region", "version": 1 }, "end_va": 1965330431, "entry_point": 1964900352, "filename": "\\Windows\\SysWOW64\\msvcp100.dll", "id": "region_1183", "name": "msvcp100.dll", "norm_filename": "c:\\windows\\syswow64\\msvcp100.dll", "region_type": "memory_mapped_file", "start_va": 1964900352, "timestamp": "00:02:13.925", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 2228224, "type": "region", "version": 1 }, "end_va": 2490367, "entry_point": 0, "filename": null, "id": "region_1184", "name": "private_0x0000000000220000", "norm_filename": null, "region_type": "private_memory", "start_va": 2228224, "timestamp": "00:02:14.042", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 33882112, "type": "region", "version": 1 }, "end_va": 34930687, "entry_point": 0, "filename": null, "id": "region_1185", "name": "private_0x0000000002050000", "norm_filename": null, "region_type": "private_memory", "start_va": 33882112, "timestamp": "00:02:14.053", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 2228224, "type": "region", "version": 1 }, "end_va": 2232319, "entry_point": 0, "filename": null, "id": "region_1186", "name": "pagefile_0x0000000000220000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2228224, "timestamp": "00:02:14.093", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 65536, "start_va": 2424832, "type": "region", "version": 1 }, "end_va": 2490367, "entry_point": 0, "filename": null, "id": "region_1187", "name": "private_0x0000000000250000", "norm_filename": null, "region_type": "private_memory", "start_va": 2424832, "timestamp": "00:02:14.093", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1052672, "start_va": 34930688, "type": "region", "version": 1 }, "end_va": 35983359, "entry_point": 0, "filename": null, "id": "region_1188", "name": "private_0x0000000002150000", "norm_filename": null, "region_type": "private_memory", "start_va": 34930688, "timestamp": "00:02:14.100", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 34930688, "type": "region", "version": 1 }, "end_va": 35979263, "entry_point": 0, "filename": null, "id": "region_1189", "name": "private_0x0000000002150000", "norm_filename": null, "region_type": "private_memory", "start_va": 34930688, "timestamp": "00:02:14.113", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 35651584, "type": "region", "version": 1 }, "end_va": 36700159, "entry_point": 0, "filename": null, "id": "region_1190", "name": "private_0x0000000002200000", "norm_filename": null, "region_type": "private_memory", "start_va": 35651584, "timestamp": "00:02:14.113", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 159744, "start_va": 1964703744, "type": "region", "version": 1 }, "end_va": 1964863487, "entry_point": 1964703744, "filename": "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll", "id": "region_1191", "name": "softokn3.dll", "norm_filename": "c:\\program files (x86)\\mozilla firefox\\softokn3.dll", "region_type": "memory_mapped_file", "start_va": 1964703744, "timestamp": "00:02:14.145", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 94208, "start_va": 1964572672, "type": "region", "version": 1 }, "end_va": 1964666879, "entry_point": 1964572672, "filename": "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll", "id": "region_1192", "name": "nssdbm3.dll", "norm_filename": "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll", "region_type": "memory_mapped_file", "start_va": 1964572672, "timestamp": "00:02:14.263", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4096, "start_va": 2293760, "type": "region", "version": 1 }, "end_va": 2297855, "entry_point": 2293760, "filename": "\\Windows\\SysWOW64\\tzres.dll", "id": "region_1193", "name": "tzres.dll", "norm_filename": "c:\\windows\\syswow64\\tzres.dll", "region_type": "memory_mapped_file", "start_va": 2293760, "timestamp": "00:02:14.351", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 28672, "start_va": 2359296, "type": "region", "version": 1 }, "end_va": 2387967, "entry_point": 0, "filename": null, "id": "region_1194", "name": "pagefile_0x0000000000240000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 2359296, "timestamp": "00:02:14.375", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 8192, "start_va": 3014656, "type": "region", "version": 1 }, "end_va": 3022847, "entry_point": 0, "filename": null, "id": "region_1195", "name": "pagefile_0x00000000002e0000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 3014656, "timestamp": "00:02:14.375", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "pagefile_backed_regions_ignored" ], "info": "No dump created because pagefile backed regions are disabled in the configuration", "permissions": [ "readable" ], "ref_process_dump": null, "size": 4141056, "start_va": 36700160, "type": "region", "version": 1 }, "end_va": 40841215, "entry_point": 0, "filename": null, "id": "region_1196", "name": "pagefile_0x0000000002300000", "norm_filename": null, "region_type": "pagefile_backed_memory", "start_va": 36700160, "timestamp": "00:02:14.376", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 323584, "start_va": 1964244992, "type": "region", "version": 1 }, "end_va": 1964568575, "entry_point": 1964244992, "filename": "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll", "id": "region_1198", "name": "freebl3.dll", "norm_filename": "c:\\program files (x86)\\mozilla firefox\\freebl3.dll", "region_type": "memory_mapped_file", "start_va": 1964244992, "timestamp": "00:02:14.420", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1052672, "start_va": 40894464, "type": "region", "version": 1 }, "end_va": 41947135, "entry_point": 0, "filename": null, "id": "region_1199", "name": "private_0x0000000002700000", "norm_filename": null, "region_type": "private_memory", "start_va": 40894464, "timestamp": "00:02:14.543", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 20480, "start_va": 2293760, "type": "region", "version": 1 }, "end_va": 2314239, "entry_point": 0, "filename": null, "id": "region_1200", "name": "private_0x0000000000230000", "norm_filename": null, "region_type": "private_memory", "start_va": 2293760, "timestamp": "00:02:14.612", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 49152, "start_va": 1968439296, "type": "region", "version": 1 }, "end_va": 1968488447, "entry_point": 1968439296, "filename": "\\Windows\\SysWOW64\\vaultcli.dll", "id": "region_1201", "name": "vaultcli.dll", "norm_filename": "c:\\windows\\syswow64\\vaultcli.dll", "region_type": "memory_mapped_file", "start_va": 1968439296, "timestamp": "00:02:14.955", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 3080192, "type": "region", "version": 1 }, "end_va": 3342335, "entry_point": 0, "filename": null, "id": "region_1202", "name": "private_0x00000000002f0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3080192, "timestamp": "00:02:15.669", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 40894464, "type": "region", "version": 1 }, "end_va": 41943039, "entry_point": 0, "filename": null, "id": "region_1203", "name": "private_0x0000000002700000", "norm_filename": null, "region_type": "private_memory", "start_va": 40894464, "timestamp": "00:02:15.669", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 45056, "start_va": 1968373760, "type": "region", "version": 1 }, "end_va": 1968418815, "entry_point": 1968373760, "filename": "\\Windows\\SysWOW64\\profapi.dll", "id": "region_1204", "name": "profapi.dll", "norm_filename": "c:\\windows\\syswow64\\profapi.dll", "region_type": "memory_mapped_file", "start_va": 1968373760, "timestamp": "00:02:15.669", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 12288, "start_va": 2130542592, "type": "region", "version": 1 }, "end_va": 2130554879, "entry_point": 0, "filename": null, "id": "region_1205", "name": "private_0x000000007efd8000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130542592, "timestamp": "00:02:15.669", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 4096, "start_va": 2293760, "type": "region", "version": 1 }, "end_va": 2297855, "entry_point": 0, "filename": null, "id": "region_1206", "name": "private_0x0000000000230000", "norm_filename": null, "region_type": "private_memory", "start_va": 2293760, "timestamp": "00:02:16.076", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 69632, "start_va": 1968242688, "type": "region", "version": 1 }, "end_va": 1968312319, "entry_point": 1968242688, "filename": "\\Windows\\SysWOW64\\netapi32.dll", "id": "region_1207", "name": "netapi32.dll", "norm_filename": "c:\\windows\\syswow64\\netapi32.dll", "region_type": "memory_mapped_file", "start_va": 1968242688, "timestamp": "00:02:16.091", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 36864, "start_va": 1968177152, "type": "region", "version": 1 }, "end_va": 1968214015, "entry_point": 1968177152, "filename": "\\Windows\\SysWOW64\\netutils.dll", "id": "region_1208", "name": "netutils.dll", "norm_filename": "c:\\windows\\syswow64\\netutils.dll", "region_type": "memory_mapped_file", "start_va": 1968177152, "timestamp": "00:02:16.192", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 102400, "start_va": 1968046080, "type": "region", "version": 1 }, "end_va": 1968148479, "entry_point": 1968046080, "filename": "\\Windows\\SysWOW64\\srvcli.dll", "id": "region_1209", "name": "srvcli.dll", "norm_filename": "c:\\windows\\syswow64\\srvcli.dll", "region_type": "memory_mapped_file", "start_va": 1968046080, "timestamp": "00:02:16.194", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 61440, "start_va": 1967980544, "type": "region", "version": 1 }, "end_va": 1968041983, "entry_point": 1967980544, "filename": "\\Windows\\SysWOW64\\wkscli.dll", "id": "region_1210", "name": "wkscli.dll", "norm_filename": "c:\\windows\\syswow64\\wkscli.dll", "region_type": "memory_mapped_file", "start_va": 1967980544, "timestamp": "00:02:16.194", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 61440, "start_va": 1967915008, "type": "region", "version": 1 }, "end_va": 1967976447, "entry_point": 1967915008, "filename": "\\Windows\\SysWOW64\\samcli.dll", "id": "region_1211", "name": "samcli.dll", "norm_filename": "c:\\windows\\syswow64\\samcli.dll", "region_type": "memory_mapped_file", "start_va": 1967915008, "timestamp": "00:02:16.211", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 73728, "start_va": 1967783936, "type": "region", "version": 1 }, "end_va": 1967857663, "entry_point": 1967783936, "filename": "\\Windows\\SysWOW64\\samlib.dll", "id": "region_1212", "name": "samlib.dll", "norm_filename": "c:\\windows\\syswow64\\samlib.dll", "region_type": "memory_mapped_file", "start_va": 1967783936, "timestamp": "00:02:16.256", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 3538944, "type": "region", "version": 1 }, "end_va": 3801087, "entry_point": 0, "filename": null, "id": "region_1213", "name": "private_0x0000000000360000", "norm_filename": null, "region_type": "private_memory", "start_va": 3538944, "timestamp": "00:02:16.310", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 41943040, "type": "region", "version": 1 }, "end_va": 42991615, "entry_point": 0, "filename": null, "id": "region_1214", "name": "private_0x0000000002800000", "norm_filename": null, "region_type": "private_memory", "start_va": 41943040, "timestamp": "00:02:16.310", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 12288, "start_va": 2130530304, "type": "region", "version": 1 }, "end_va": 2130542591, "entry_point": 0, "filename": null, "id": "region_1215", "name": "private_0x000000007efd5000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130530304, "timestamp": "00:02:16.310", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 94208, "start_va": 1967652864, "type": "region", "version": 1 }, "end_va": 1967747071, "entry_point": 1967652864, "filename": "\\Windows\\SysWOW64\\userenv.dll", "id": "region_1216", "name": "userenv.dll", "norm_filename": "c:\\windows\\syswow64\\userenv.dll", "region_type": "memory_mapped_file", "start_va": 1967652864, "timestamp": "00:02:16.323", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 1167360, "start_va": 1975058432, "type": "region", "version": 1 }, "end_va": 1976225791, "entry_point": 1975058432, "filename": "\\Windows\\SysWOW64\\crypt32.dll", "id": "region_1217", "name": "crypt32.dll", "norm_filename": "c:\\windows\\syswow64\\crypt32.dll", "region_type": "memory_mapped_file", "start_va": 1975058432, "timestamp": "00:02:16.460", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 49152, "start_va": 1977614336, "type": "region", "version": 1 }, "end_va": 1977663487, "entry_point": 1977614336, "filename": "\\Windows\\SysWOW64\\msasn1.dll", "id": "region_1218", "name": "msasn1.dll", "norm_filename": "c:\\windows\\syswow64\\msasn1.dll", "region_type": "memory_mapped_file", "start_va": 1977614336, "timestamp": "00:02:16.460", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 245760, "start_va": 1967390720, "type": "region", "version": 1 }, "end_va": 1967636479, "entry_point": 1967390720, "filename": "\\Windows\\SysWOW64\\mswsock.dll", "id": "region_1219", "name": "mswsock.dll", "norm_filename": "c:\\windows\\syswow64\\mswsock.dll", "region_type": "memory_mapped_file", "start_va": 1967390720, "timestamp": "00:02:16.484", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 278528, "start_va": 1967063040, "type": "region", "version": 1 }, "end_va": 1967341567, "entry_point": 1967063040, "filename": "\\Windows\\SysWOW64\\dnsapi.dll", "id": "region_1220", "name": "dnsapi.dll", "norm_filename": "c:\\windows\\syswow64\\dnsapi.dll", "region_type": "memory_mapped_file", "start_va": 1967063040, "timestamp": "00:02:16.486", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 720896, "start_va": 4915200, "type": "region", "version": 1 }, "end_va": 5636095, "entry_point": 0, "filename": null, "id": "region_1221", "name": "private_0x00000000004b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4915200, "timestamp": "00:02:16.487", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 114688, "start_va": 1966931968, "type": "region", "version": 1 }, "end_va": 1967046655, "entry_point": 1966931968, "filename": "\\Windows\\SysWOW64\\IPHLPAPI.DLL", "id": "region_1222", "name": "iphlpapi.dll", "norm_filename": "c:\\windows\\syswow64\\iphlpapi.dll", "region_type": "memory_mapped_file", "start_va": 1966931968, "timestamp": "00:02:16.489", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 28672, "start_va": 1966866432, "type": "region", "version": 1 }, "end_va": 1966895103, "entry_point": 1966866432, "filename": "\\Windows\\SysWOW64\\winnsi.dll", "id": "region_1223", "name": "winnsi.dll", "norm_filename": "c:\\windows\\syswow64\\winnsi.dll", "region_type": "memory_mapped_file", "start_va": 1966866432, "timestamp": "00:02:16.489", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 229376, "start_va": 1966604288, "type": "region", "version": 1 }, "end_va": 1966833663, "entry_point": 1966604288, "filename": "\\Windows\\SysWOW64\\FWPUCLNT.DLL", "id": "region_1224", "name": "fwpuclnt.dll", "norm_filename": "c:\\windows\\syswow64\\fwpuclnt.dll", "region_type": "memory_mapped_file", "start_va": 1966604288, "timestamp": "00:02:16.492", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 2293760, "start_va": 42991616, "type": "region", "version": 1 }, "end_va": 45285375, "entry_point": 0, "filename": null, "id": "region_1225", "name": "private_0x0000000002900000", "norm_filename": null, "region_type": "private_memory", "start_va": 42991616, "timestamp": "00:02:16.493", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 24576, "start_va": 1966538752, "type": "region", "version": 1 }, "end_va": 1966563327, "entry_point": 1966538752, "filename": "\\Windows\\SysWOW64\\rasadhlp.dll", "id": "region_1226", "name": "rasadhlp.dll", "norm_filename": "c:\\windows\\syswow64\\rasadhlp.dll", "region_type": "memory_mapped_file", "start_va": 1966538752, "timestamp": "00:02:16.495", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 524288, "start_va": 34930688, "type": "region", "version": 1 }, "end_va": 35454975, "entry_point": 0, "filename": null, "id": "region_1227", "name": "private_0x0000000002150000", "norm_filename": null, "region_type": "private_memory", "start_va": 34930688, "timestamp": "00:02:16.496", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 24576, "start_va": 1966473216, "type": "region", "version": 1 }, "end_va": 1966497791, "entry_point": 1966473216, "filename": "\\Windows\\SysWOW64\\wship6.dll", "id": "region_1228", "name": "wship6.dll", "norm_filename": "c:\\windows\\syswow64\\wship6.dll", "region_type": "memory_mapped_file", "start_va": 1966473216, "timestamp": "00:02:16.497", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "unmonitored" ], "info": "No dump was created because region is not monitored", "permissions": [ "readable", "writable", "executable" ], "ref_process_dump": null, "size": 20480, "start_va": 1966407680, "type": "region", "version": 1 }, "end_va": 1966428159, "entry_point": 1966407680, "filename": "\\Windows\\SysWOW64\\WSHTCPIP.DLL", "id": "region_1229", "name": "wshtcpip.dll", "norm_filename": "c:\\windows\\syswow64\\wshtcpip.dll", "region_type": "memory_mapped_file", "start_va": 1966407680, "timestamp": "00:02:16.498", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 8192, "start_va": 2424832, "type": "region", "version": 1 }, "end_va": 2433023, "entry_point": 0, "filename": null, "id": "region_1230", "name": "private_0x0000000000250000", "norm_filename": null, "region_type": "private_memory", "start_va": 2424832, "timestamp": "00:02:17.269", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 3801088, "type": "region", "version": 1 }, "end_va": 4063231, "entry_point": 0, "filename": null, "id": "region_1231", "name": "private_0x00000000003a0000", "norm_filename": null, "region_type": "private_memory", "start_va": 3801088, "timestamp": "00:02:18.823", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 42991616, "type": "region", "version": 1 }, "end_va": 44040191, "entry_point": 0, "filename": null, "id": "region_1232", "name": "private_0x0000000002900000", "norm_filename": null, "region_type": "private_memory", "start_va": 42991616, "timestamp": "00:02:18.823", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 45023232, "type": "region", "version": 1 }, "end_va": 45285375, "entry_point": 0, "filename": null, "id": "region_1233", "name": "private_0x0000000002af0000", "norm_filename": null, "region_type": "private_memory", "start_va": 45023232, "timestamp": "00:02:18.823", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 12288, "start_va": 2130366464, "type": "region", "version": 1 }, "end_va": 2130378751, "entry_point": 0, "filename": null, "id": "region_1234", "name": "private_0x000000007efad000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130366464, "timestamp": "00:02:18.823", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 4915200, "type": "region", "version": 1 }, "end_va": 5177343, "entry_point": 0, "filename": null, "id": "region_1235", "name": "private_0x00000000004b0000", "norm_filename": null, "region_type": "private_memory", "start_va": 4915200, "timestamp": "00:03:19.496", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 262144, "start_va": 5373952, "type": "region", "version": 1 }, "end_va": 5636095, "entry_point": 0, "filename": null, "id": "region_1236", "name": "private_0x0000000000520000", "norm_filename": null, "region_type": "private_memory", "start_va": 5373952, "timestamp": "00:03:19.496", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 1048576, "start_va": 45285376, "type": "region", "version": 1 }, "end_va": 46333951, "entry_point": 0, "filename": null, "id": "region_1237", "name": "private_0x0000000002b30000", "norm_filename": null, "region_type": "private_memory", "start_va": 45285376, "timestamp": "00:03:19.496", "type": "region", "version": 1 }, { "dump": { "filename": "", "flags": [ "max_num_dumps_reached" ], "info": "No dump was created because the maximum number of dumps was reached", "permissions": [ "readable", "writable" ], "ref_process_dump": null, "size": 12288, "start_va": 2130354176, "type": "region", "version": 1 }, "end_va": 2130366463, "entry_point": 0, "filename": null, "id": "region_1238", "name": "private_0x000000007efaa000", "norm_filename": null, "region_type": "private_memory", "start_va": 2130354176, "timestamp": "00:03:19.496", "type": "region", "version": 1 } ], "terminate_reason": "timeout", "type": "monitored_process", "unmonitor_reason": "terminated_by_timeout", "version": 1 } ], "remarks": { "critical": [], "non_critical": [ { "comment": "The maximum number of dumps was reached during the analysis. Some memory dumps may be missing in the reports. You can increase the limit in the configuration.", "id": 2048, "type": "remark", "version": 1 } ], "type": "remarks", "version": 1 }, "sample_details": { "filename": "QAS_031218.xls", "id": 21058, "md5_hash": "e9095deab097f17e0989cf518b0133ce", "sample_type": "excel_document", "sha1_hash": "4d3e7af89f9afb8c5d4b0f7c3f865bb4dbacf327", "sha256_hash": "2dc346015c02c8c9f97e75f72cf194c8a8830c7a932ba22c502fcd3841a14e56", "size": 203776, "type": "sample_details", "version": 1 }, "screenshots": [ { "screenshot_archive_path": "screenshots/screenshot_0.png", "size": 129552, "thumbnail_archive_path": "screenshots/thumbnail_0.png", "timestamp": "00:00:00.000", "type": "screenshot", "version": 1 }, { "screenshot_archive_path": "screenshots/screenshot_103508.png", "size": 97284, "thumbnail_archive_path": "screenshots/thumbnail_103508.png", "timestamp": "00:01:43.508", "type": "screenshot", "version": 1 }, { "screenshot_archive_path": "screenshots/screenshot_115394.png", "size": 35084, "thumbnail_archive_path": "screenshots/thumbnail_115394.png", "timestamp": "00:01:55.394", "type": "screenshot", "version": 1 }, { "screenshot_archive_path": "screenshots/screenshot_125543.png", "size": 1005486, "thumbnail_archive_path": "screenshots/thumbnail_125543.png", "timestamp": "00:02:05.543", "type": "screenshot", "version": 1 } ], "type": "summary", "version": 1, "vm_and_analyzer_details": { "adobe_acrobat_reader_version": "not_installed", "analyzer_build_date": "2018-02-08 15:49", "analyzer_version": "2.2.0", "chrome_version": "59.0.3071.104", "firefox_version": "25.0", "flash_version": "11.2.202.233", "internet_explorer_version": "8.0.7601.17514", "java_version": "7.0.550.13", "microsoft_excel_version": "not_installed", "microsoft_office_version": "not_installed", "microsoft_power_point_version": "not_installed", "microsoft_project_version": "not_installed", "microsoft_publisher_version": "not_installed", "microsoft_visio_version": "not_installed", "microsoft_word_version": "not_installed", "silverlight_version": "not_installed", "type": "vm_and_analyzer_details", "version": 1, "vm_architecture": "x86_64-bit", "vm_kernel_version": "6.1.7601.17514_(3844dbb9-2017-4967-be7a-a4a2c20430fa)", "vm_name": null, "vm_os": "windows_7" }, "vti": { "type": "vti", "version": 1, "vti_built_in_rules_version": "2.6", "vti_rule_matches": [ { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_download_file", "operation_desc": "Download file", "ref_gfncalls": [ { "ref_id": "gfn_88", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_download_file_by_url", "technique_desc": "Download file from \"http://kdotraky.com/kat/val.exe\" to \"c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe\".", "technique_path": "built_in._network._download_file.vmray_download_file_by_url", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_process", "category_desc": "Process", "operation": "_document_create_process", "operation_desc": "Create process", "ref_gfncalls": [ { "ref_id": "gfn_90", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_document_create_process", "technique_desc": "Create process \"C:\\Users\\kFT6uTQW\\AppData\\Local\\Temp\\heidi.exe\".", "technique_path": "built_in._process._document_create_process.vmray_document_create_process", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_anti_analysis", "category_desc": "Anti Analysis", "operation": "_detect_debugger", "operation_desc": "Try to detect debugger", "ref_gfncalls": [ { "ref_id": "gfn_213", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_detect_debugger_by_api", "technique_desc": "Check via API \"NtQueryInformationProcess\".", "technique_path": "built_in._anti_analysis._detect_debugger.vmray_detect_debugger_by_api", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [ { "operations": [ "read" ], "reg_key_name": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography", "type": "registry_artifact", "version": 1 } ], "type": "artifacts", "urls": [], "version": 1 }, "category": "_info_stealing", "category_desc": "Information Stealing", "operation": "_read_system_data", "operation_desc": "Read system data", "ref_gfncalls": [ { "ref_id": "gfn_958", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 2, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_read_machine_guid", "technique_desc": "Read the cryptographic machine GUID from registry.", "technique_path": "built_in._info_stealing._read_system_data.vmray_read_machine_guid", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [ { "mutex_name": "73EE9CC98E5412EEF2B9A336", "operations": [ "access" ], "type": "mutex_artifact", "version": 1 } ], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_process", "category_desc": "Process", "operation": "_install_ipc_endpoint", "operation_desc": "Create system object", "ref_gfncalls": [ { "ref_id": "gfn_966", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 1, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_install_ipc_endpoint", "technique_desc": "Create mutex with name \"73EE9CC98E5412EEF2B9A336\".", "technique_path": "built_in._process._install_ipc_endpoint.vmray_install_ipc_endpoint", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [ { "filename": "C:\\Users\\kFT6uTQW\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", "hashes": [], "norm_filename": "c:\\users\\kft6utqw\\appdata\\local\\google\\chrome\\user data\\default\\login data", "operations": [ "read" ], "type": "file_artifact", "version": 1 } ], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_browser", "category_desc": "Browser", "operation": "_browser_data_credentials", "operation_desc": "Read data related to saved browser credentials", "ref_gfncalls": [ { "ref_id": "gfn_1062", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 3, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_read_browser_credentials", "technique_desc": "Read saved credentials for \"Google Chrome\".", "technique_path": "built_in._browser._browser_data_credentials.vmray_read_browser_credentials", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [ { "ip_address": "101.99.75.184", "type": "ip_address_artifact", "version": 1 } ], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_request_dns", "operation_desc": "Perform DNS request", "ref_gfncalls": [ { "ref_id": "gfn_1207", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 3, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_request_dns_by_name", "technique_desc": "Resolve host name \"kdotraky.com\".", "technique_path": "built_in._network._request_dns.vmray_request_dns_by_name", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_request_dns", "operation_desc": "Perform DNS request", "ref_gfncalls": [ { "ref_id": "gfn_1251", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 3, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_request_dns_by_name", "technique_desc": "Resolve host name \"\u0097\u008b\u008b\u008f\u00c5\u00d0\u00d0\u0094\u009b\u0090\u008b\u008d\u009e\u0094\u0086\u00d1\u009c\u0090\u0092\u00d0\u008b\u009a\u0092\u008f\u00d0\u00af\u009e\u0091\u009a\u0093\u00d0\u0099\u0096\u0089\u009a\u00d0\u0099\u008d\u009a\u00d1\u008f\u0097\u008f\".", "technique_path": "built_in._network._request_dns.vmray_request_dns_by_name", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_file_system", "category_desc": "File System", "operation": "_handle_with_malicious_files", "operation_desc": "Handle with malicious files", "ref_gfncalls": [], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_handle_with_malicious_files", "technique_desc": "File \"c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\val[1].exe\" is a known malicious file.", "technique_path": "built_in._file_system._handle_with_malicious_files.vmray_handle_with_malicious_files", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_injection", "category_desc": "Injection", "operation": "_modify_memory_non_system", "operation_desc": "Write into memory of a process running from a created or modified executable", "ref_gfncalls": [], "rule_score": 5, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_modify_memory", "technique_desc": "\"c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe\" modifies memory of \"c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe\"", "technique_path": "built_in._injection._modify_memory_non_system.vmray_modify_memory", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_injection", "category_desc": "Injection", "operation": "_modify_control_flow_non_system", "operation_desc": "Modify control flow of a process running from a created or modified executable", "ref_gfncalls": [], "rule_score": 5, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_modify_control_flow_non_system", "technique_desc": "\"c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe\" alters context of \"c:\\users\\kft6utqw\\appdata\\local\\temp\\heidi.exe\"", "technique_path": "built_in._injection._modify_control_flow_non_system.vmray_modify_control_flow_non_system", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_connect", "operation_desc": "Connect to remote host", "ref_gfncalls": [ { "ref_id": "gfn_1209", "ref_source": "glog", "ref_type": "gfncall", "type": "reference", "version": 1 } ], "rule_score": 3, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_tcp_out_connection", "technique_desc": "Outgoing TCP connection to host \"101.99.75.184:80\".", "technique_path": "built_in._network._connect.vmray_tcp_out_connection", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_reputation_url_lookup", "operation_desc": "Reputation URL lookup", "ref_gfncalls": [], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_reputation_url_malicious", "technique_desc": "URL \"http://kdotraky.com/kat/val.exe\" is known as malicious URL.", "technique_path": "built_in._network._reputation_url_lookup.vmray_reputation_url_malicious", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_reputation_url_lookup", "operation_desc": "Reputation URL lookup", "ref_gfncalls": [], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_reputation_url_malicious", "technique_desc": "URL \"kdotraky.com/temp/Panel/five/fre.php\" is known as malicious URL.", "technique_path": "built_in._network._reputation_url_lookup.vmray_reputation_url_malicious", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_download_data", "operation_desc": "Download data", "ref_gfncalls": [], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_download_data_http_request", "technique_desc": "URL \"http://kdotraky.com/kat/val.exe\".", "technique_path": "built_in._network._download_data.vmray_download_data_http_request", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_network", "category_desc": "Network", "operation": "_download_data", "operation_desc": "Download data", "ref_gfncalls": [], "rule_score": 4, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_download_data_http_request", "technique_desc": "URL \"kdotraky.com/temp/Panel/five/fre.php\".", "technique_path": "built_in._network._download_data.vmray_download_data_http_request", "type": "vti_rule_match", "version": 1 }, { "artifacts": { "files": [], "ips": [], "mutexes": [], "registry": [], "type": "artifacts", "urls": [], "version": 1 }, "category": "_pe", "category_desc": "PE", "operation": "_drop_pe_file", "operation_desc": "Drop PE file", "ref_gfncalls": [], "rule_score": 2, "rule_type": "built_in", "rule_version": 1, "technique": "vmray_drop_pe_file", "technique_desc": "Drop file \"c:\\users\\kft6utqw\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\val[1].exe\".", "technique_path": "built_in._pe._drop_pe_file.vmray_drop_pe_file", "type": "vti_rule_match", "version": 1 } ], "vti_rule_type": "Documents", "vti_score": 100 }, "yara": { "apply_yara": true, "apply_yara_on_created_files": true, "apply_yara_on_modified_files": true, "apply_yara_on_pcap_file": true, "apply_yara_on_process_dumps": true, "apply_yara_on_sample_files": true, "match_count": 0, "matches": [], "ruleset_count": 6, "type": "yara", "version": 1 } }