|
@@ -0,0 +1,5583 @@
|
|
|
+---
|
|
|
+created: '2019-05-02T10:52:08.545303Z'
|
|
|
+creator: sentry
|
|
|
+source: tests/symbolicator/test_unreal_full.py
|
|
|
+---
|
|
|
+contexts:
|
|
|
+ device:
|
|
|
+ arch: x86_64
|
|
|
+ memory_size: 6896832512
|
|
|
+ type: device
|
|
|
+ gpu:
|
|
|
+ name: Parallels Display Adapter (WDDM)
|
|
|
+ type: gpu
|
|
|
+ os:
|
|
|
+ build: ''
|
|
|
+ name: Windows 10
|
|
|
+ type: os
|
|
|
+ version: 10.0.17134
|
|
|
+exception:
|
|
|
+ values:
|
|
|
+ - mechanism:
|
|
|
+ handled: false
|
|
|
+ synthetic: true
|
|
|
+ type: minidump
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c73c6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7548229e6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814eaa'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814e4c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754805258'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7571fcd39'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75739984f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75739082f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757aafb58'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757aa121d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8cf00'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8cc56'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757a56186'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757a3e77e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756f2f984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756f06dd3'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756cff2ee'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754be3394'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c73c6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7548229e6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814eaa'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814e4c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754805258'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7571fcd39'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75739984f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75739082f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757aafb58'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757aa121d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8cf00'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8cc56'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757a56186'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757a3e77e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756f2f984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756f06dd3'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756cff2ee'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: prewalked
|
|
|
+ - function: AActor::IsPendingKillPending
|
|
|
+ in_app: false
|
|
|
+ instruction_addr: '0x7ff754be3394'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ raw_function: AActor::IsPendingKillPending()
|
|
|
+ trust: prewalked
|
|
|
+ thread_id: 6900
|
|
|
+ type: EXCEPTION_ACCESS_VIOLATION_READ
|
|
|
+ value: 'Fatal Error: EXCEPTION_ACCESS_VIOLATION_READ'
|
|
|
+extra:
|
|
|
+ app_default_locate: en-US
|
|
|
+ base_dir: //Mac/Home/Desktop/WindowsNoEditor/YetAnother/Binaries/Win64/
|
|
|
+ build_configuration: Development
|
|
|
+ build_version: ++UE4+Release-4.20-CL-4369336
|
|
|
+ crash_guid: UE4CC-Windows-63456D684167A2659DE73EA3517BEDC4_0000
|
|
|
+ crash_reporter_client_version: '1.0'
|
|
|
+ crash_type: Crash
|
|
|
+ engine_mode: Game
|
|
|
+ engine_version: 4.20.3-4369336+++UE4+Release-4.20
|
|
|
+ executable_name: YetAnother
|
|
|
+ game_name: UE4-YetAnother
|
|
|
+ is_assert: false
|
|
|
+ is_ensure: false
|
|
|
+ is_internal_build: false
|
|
|
+ is_source_distribution: false
|
|
|
+ is_ue4_release: false
|
|
|
+ language_lcid: 1033
|
|
|
+ legacy_call_stack: 'YetAnother!AActor::IsPendingKillPending()
|
|
|
+
|
|
|
+ YetAnother!AActor::Destroy()
|
|
|
+
|
|
|
+ YetAnother!FActorComponentTickFunction::ExecuteTickHelper<<lambda_e8384def656dc646af48282ce274db64>
|
|
|
+ >()
|
|
|
+
|
|
|
+ YetAnother!FActorComponentTickFunction::ExecuteTick()
|
|
|
+
|
|
|
+ YetAnother!FTickFunctionTask::DoTask()
|
|
|
+
|
|
|
+ YetAnother!TGraphTask<FTickFunctionTask>::ExecuteTask()
|
|
|
+
|
|
|
+ YetAnother!FNamedTaskThread::ProcessTasksNamedThread()
|
|
|
+
|
|
|
+ YetAnother!FNamedTaskThread::ProcessTasksUntilIdle()
|
|
|
+
|
|
|
+ YetAnother!FTickTaskSequencer::ReleaseTickGroup()
|
|
|
+
|
|
|
+ YetAnother!FTickTaskManager::RunTickGroup()
|
|
|
+
|
|
|
+ YetAnother!UWorld::RunTickGroup()
|
|
|
+
|
|
|
+ YetAnother!UWorld::Tick()
|
|
|
+
|
|
|
+ YetAnother!UGameEngine::Tick()
|
|
|
+
|
|
|
+ YetAnother!FEngineLoop::Tick()
|
|
|
+
|
|
|
+ YetAnother!GuardedMain()
|
|
|
+
|
|
|
+ YetAnother!GuardedMainWrapper()
|
|
|
+
|
|
|
+ YetAnother!WinMain()
|
|
|
+
|
|
|
+ YetAnother!__scrt_common_main_seh() [f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:288]
|
|
|
+
|
|
|
+ kernel32
|
|
|
+
|
|
|
+ ntdll'
|
|
|
+ login_id: 9776d4844cc893f55395dbbefb0eb6d7
|
|
|
+ machine_id: 9776D4844CC893F55395DBBEFB0EB6D7
|
|
|
+ memory_stats_page_size: 4096
|
|
|
+ memory_stats_total_phsysical_gb: 7
|
|
|
+ memory_stats_total_virtual: 140737488224256
|
|
|
+ misc_cpu_brand: Intel(R) Core(TM) i7-7920HQ CPU @ 3.10GHz
|
|
|
+ misc_cpu_vendor: GenuineIntel
|
|
|
+ misc_number_of_cores: 6
|
|
|
+ misc_number_of_cores_inc_hyperthread: 6
|
|
|
+ platform_name: WindowsNoEditor
|
|
|
+ process_id: 9444
|
|
|
+ root_dir: /Mac/Home/Desktop/WindowsNoEditor/
|
|
|
+ seconds_since_start: 8
|
|
|
+ time_of_crash: 636783112433190000
|
|
|
+stacktrace: null
|
|
|
+threads:
|
|
|
+ values:
|
|
|
+ - crashed: false
|
|
|
+ id: 248
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7548229e6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7544e0000'
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75563d233'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759a2f3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589ca88b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a4831a8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7544e0000'
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814eaa'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759a2f3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7544e0000'
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a4831a8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10066c86'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fed3d'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814eaa'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754814eaa'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe03a9bf10'
|
|
|
+ package: C:\Windows\System32\VCRUNTIME140.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589e69ae'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759a2f3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759a2f3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755181c71'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff7544e0000'
|
|
|
+ r11: '0x7ff7589ca88b'
|
|
|
+ r12: '0x7ff7544e0000'
|
|
|
+ r13: '0x8c3f2cf910'
|
|
|
+ r14: '0x26c'
|
|
|
+ r15: '0x8c3f2cc670'
|
|
|
+ r8: '0x8c3f2cccc0'
|
|
|
+ r9: '0x8c3f2cc670'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3f2cf910'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x26c'
|
|
|
+ rdi: '0x26c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3f2cc448'
|
|
|
+ rsp: '0x8c3f2cc418'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff7544e0000'
|
|
|
+ r11: '0x7ff7589ca88b'
|
|
|
+ r12: '0x7ff7544e0000'
|
|
|
+ r13: '0x8c3f2cf910'
|
|
|
+ r14: '0x26c'
|
|
|
+ r15: '0x8c3f2cc670'
|
|
|
+ r8: '0x8c3f2cccc0'
|
|
|
+ r9: '0x8c3f2cc670'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3f2cf910'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x26c'
|
|
|
+ rdi: '0x26c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3f2cc448'
|
|
|
+ rsp: '0x8c3f2cc418'
|
|
|
+ - crashed: false
|
|
|
+ id: 9772
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10083140'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe1007f856'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x6c'
|
|
|
+ r11: '0x8c3f79f140'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x8c3f79f3a0'
|
|
|
+ r9: '0x23df732ca30'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7325070'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7325070'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c3f79fb48'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x6c'
|
|
|
+ r11: '0x8c3f79f140'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x8c3f79f3a0'
|
|
|
+ r9: '0x23df732ca30'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7325070'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7325070'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c3f79fb48'
|
|
|
+ - crashed: false
|
|
|
+ id: 8188
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10083140'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe1007f856'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23d833cc5b0'
|
|
|
+ r11: '0x23d833ce4b0'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x8'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7326fd0'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7326fd0'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c3fc6f838'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23d833cc5b0'
|
|
|
+ r11: '0x23d833ce4b0'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x8'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7326fd0'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7326fd0'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c3fc6f838'
|
|
|
+ - crashed: false
|
|
|
+ id: 10188
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10083140'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe1007f856'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7290cc0'
|
|
|
+ r11: '0x7ffe10178b20'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x23d83413970'
|
|
|
+ r9: '0x1b0'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7327370'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7327370'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c4013f6b8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7290cc0'
|
|
|
+ r11: '0x7ffe10178b20'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7323810'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x23d83413970'
|
|
|
+ r9: '0x1b0'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23df7327370'
|
|
|
+ rcx: '0x50'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23df7327370'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c4013f6b8'
|
|
|
+ - crashed: true
|
|
|
+ id: 6900
|
|
|
+ - crashed: false
|
|
|
+ id: 5200
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a672d0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a671f8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8f221'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19f20'
|
|
|
+ r14: '0x2a0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x8c3ebbf410'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebbf5a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a0'
|
|
|
+ rdi: '0x2a0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c3ebbf438'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19f20'
|
|
|
+ r14: '0x2a0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x8c3ebbf410'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebbf5a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a0'
|
|
|
+ rdi: '0x2a0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c3ebbf438'
|
|
|
+ - crashed: false
|
|
|
+ id: 9648
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19f60'
|
|
|
+ r14: '0x2a4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4068f738'
|
|
|
+ r9: '0x8c4068f8a9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4068f8a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a4'
|
|
|
+ rdi: '0x2a4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4068f738'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19f60'
|
|
|
+ r14: '0x2a4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4068f738'
|
|
|
+ r9: '0x8c4068f8a9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4068f8a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a4'
|
|
|
+ rdi: '0x2a4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4068f738'
|
|
|
+ - crashed: false
|
|
|
+ id: 4372
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e930000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19800'
|
|
|
+ r14: '0x2a8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4070f8e9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a8'
|
|
|
+ rdi: '0x2a8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4070f778'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e930000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19800'
|
|
|
+ r14: '0x2a8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4070f8e9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2a8'
|
|
|
+ rdi: '0x2a8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4070f778'
|
|
|
+ - crashed: false
|
|
|
+ id: 10628
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e426b5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b27e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3af02'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3ae3b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d30edc0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d197a0'
|
|
|
+ r14: '0x2ac'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4078f9c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2ac'
|
|
|
+ rdi: '0x2ac'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4078f858'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d30edc0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d197a0'
|
|
|
+ r14: '0x2ac'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4078f9c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2ac'
|
|
|
+ rdi: '0x2ac'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4078f858'
|
|
|
+ - crashed: false
|
|
|
+ id: 11280
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d48edc0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d197e0'
|
|
|
+ r14: '0x2b0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4080f5d9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b0'
|
|
|
+ rdi: '0x2b0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4080f468'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d48edc0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d197e0'
|
|
|
+ r14: '0x2b0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4080f5d9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b0'
|
|
|
+ rdi: '0x2b0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4080f468'
|
|
|
+ - crashed: false
|
|
|
+ id: 2432
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3469f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df732f648'
|
|
|
+ r11: '0x23df732f638'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19860'
|
|
|
+ r14: '0x2b4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4088f979'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b4'
|
|
|
+ rdi: '0x2b4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4088f808'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df732f648'
|
|
|
+ r11: '0x23df732f638'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19860'
|
|
|
+ r14: '0x2b4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4088f979'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b4'
|
|
|
+ rdi: '0x2b4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4088f808'
|
|
|
+ - crashed: false
|
|
|
+ id: 6680
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553923b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8b7c9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504b92d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x23d829847a0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19cc0'
|
|
|
+ r14: '0x2b8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4090fac9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b8'
|
|
|
+ rdi: '0x2b8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4090f958'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x23d829847a0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19cc0'
|
|
|
+ r14: '0x2b8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4090fac9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2b8'
|
|
|
+ rdi: '0x2b8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4090f958'
|
|
|
+ - crashed: false
|
|
|
+ id: 6492
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553923b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8b7c9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504b92d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8d180000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c80'
|
|
|
+ r14: '0x2bc'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x60000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4098fbd9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2bc'
|
|
|
+ rdi: '0x2bc'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4098fa68'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8d180000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c80'
|
|
|
+ r14: '0x2bc'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x60000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4098fbd9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2bc'
|
|
|
+ rdi: '0x2bc'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4098fa68'
|
|
|
+ - crashed: false
|
|
|
+ id: 6080
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8b7c9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504b92d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8d180000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c40'
|
|
|
+ r14: '0x2c0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23d8d077638'
|
|
|
+ r9: '0x40'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40a0f469'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c0'
|
|
|
+ rdi: '0x2c0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40a0f2f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8d180000'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c40'
|
|
|
+ r14: '0x2c0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23d8d077638'
|
|
|
+ r9: '0x40'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40a0f469'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c0'
|
|
|
+ rdi: '0x2c0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40a0f2f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 6984
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d959f5'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d290'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551659f9'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dbe522'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7589c665e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a672d0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a672d0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c00'
|
|
|
+ r14: '0x2c4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23df8f10000'
|
|
|
+ r9: '0x10000'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40a8f9d9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c4'
|
|
|
+ rdi: '0x2c4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40a8f868'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19c00'
|
|
|
+ r14: '0x2c4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23df8f10000'
|
|
|
+ r9: '0x10000'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40a8f9d9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c4'
|
|
|
+ rdi: '0x2c4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40a8f868'
|
|
|
+ - crashed: false
|
|
|
+ id: 10192
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504b92d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c40b0eef0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19bc0'
|
|
|
+ r14: '0x2c8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x2'
|
|
|
+ r9: '0x2'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40b0f739'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c8'
|
|
|
+ rdi: '0x2c8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40b0f5c8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c40b0eef0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19bc0'
|
|
|
+ r14: '0x2c8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x2'
|
|
|
+ r9: '0x2'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40b0f739'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2c8'
|
|
|
+ rdi: '0x2c8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40b0f5c8'
|
|
|
+ - crashed: false
|
|
|
+ id: 11120
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x23d82351d80'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19b80'
|
|
|
+ r14: '0x2cc'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x18'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40b8fbe9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2cc'
|
|
|
+ rdi: '0x2cc'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40b8fa78'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x23d82351d80'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19b80'
|
|
|
+ r14: '0x2cc'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x18'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40b8fbe9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2cc'
|
|
|
+ rdi: '0x2cc'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40b8fa78'
|
|
|
+ - crashed: false
|
|
|
+ id: 4872
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x8c40c0f4a8'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a380'
|
|
|
+ r14: '0x2d0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x6'
|
|
|
+ r9: '0x8'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40c0fbe9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d0'
|
|
|
+ rdi: '0x2d0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40c0fa78'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x8c40c0f4a8'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a380'
|
|
|
+ r14: '0x2d0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x6'
|
|
|
+ r9: '0x8'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40c0fbe9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d0'
|
|
|
+ rdi: '0x2d0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40c0fa78'
|
|
|
+ - crashed: false
|
|
|
+ id: 4160
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x8c40c8f268'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a340'
|
|
|
+ r14: '0x2d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23df8fb6b80'
|
|
|
+ r9: '0x2'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40c8f9a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d4'
|
|
|
+ rdi: '0x2d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40c8f838'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x8c40c8f268'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a340'
|
|
|
+ r14: '0x2d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23df8fb6b80'
|
|
|
+ r9: '0x2'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40c8f9a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d4'
|
|
|
+ rdi: '0x2d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40c8f838'
|
|
|
+ - crashed: false
|
|
|
+ id: 11048
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8bdf1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1450'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a19ed98'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7553a0fdf'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d490080'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a300'
|
|
|
+ r14: '0x2d8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40d0fa19'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d8'
|
|
|
+ rdi: '0x2d8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40d0f8a8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ff758ce10a8'
|
|
|
+ r11: '0x23d8d490080'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d1a300'
|
|
|
+ r14: '0x2d8'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1240'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40d0fa19'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x2d8'
|
|
|
+ rdi: '0x2d8'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40d0f8a8'
|
|
|
+ - crashed: false
|
|
|
+ id: 7512
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75506e26d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d176'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3bba8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1ae0c0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3469f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0cab443b'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3419b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3409c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e349d6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e01a18'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8ca09'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1e2338'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1e2338'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504752f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d7a570'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8f221'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3aed7'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e630000'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df8d19840'
|
|
|
+ r14: '0x6c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40d8fb69'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x6c'
|
|
|
+ rdi: '0x6c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40d8f9f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e630000'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df8d19840'
|
|
|
+ r14: '0x6c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xdddddddddddddddd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40d8fb69'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x6c'
|
|
|
+ rdi: '0x6c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c40d8f9f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 8684
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758bbfa00'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a671f8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75503ff42'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a67100'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758c25f01'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759452a10'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75797c3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918ca40'
|
|
|
+ r14: '0x308'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c3ebdfa88'
|
|
|
+ r9: '0x8c3ebdfbf9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebdfbf9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x308'
|
|
|
+ rdi: '0x308'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3ebdfab8'
|
|
|
+ rsp: '0x8c3ebdfa88'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918ca40'
|
|
|
+ r14: '0x308'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c3ebdfa88'
|
|
|
+ r9: '0x8c3ebdfbf9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebdfbf9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x308'
|
|
|
+ rdi: '0x308'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3ebdfab8'
|
|
|
+ rsp: '0x8c3ebdfa88'
|
|
|
+ - crashed: false
|
|
|
+ id: 5444
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cac0'
|
|
|
+ r14: '0x310'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c3ebff458'
|
|
|
+ r9: '0x8c3ebff5c9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebff5c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x310'
|
|
|
+ rdi: '0x310'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3ebff488'
|
|
|
+ rsp: '0x8c3ebff458'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cac0'
|
|
|
+ r14: '0x310'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c3ebff458'
|
|
|
+ r9: '0x8c3ebff5c9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c3ebff5c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x310'
|
|
|
+ rdi: '0x310'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c3ebff488'
|
|
|
+ rsp: '0x8c3ebff458'
|
|
|
+ - crashed: false
|
|
|
+ id: 12064
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75482017b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759452a10'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75797c3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cbc0'
|
|
|
+ r14: '0x318'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40dafc69'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x318'
|
|
|
+ rdi: '0x318'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40dafb28'
|
|
|
+ rsp: '0x8c40dafaf8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cbc0'
|
|
|
+ r14: '0x318'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40dafc69'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x318'
|
|
|
+ rdi: '0x318'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40dafb28'
|
|
|
+ rsp: '0x8c40dafaf8'
|
|
|
+ - crashed: false
|
|
|
+ id: 468
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75482017b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759452a10'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75797c3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cba0'
|
|
|
+ r14: '0x320'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40dcf809'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x320'
|
|
|
+ rdi: '0x320'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40dcf6c8'
|
|
|
+ rsp: '0x8c40dcf698'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cba0'
|
|
|
+ r14: '0x320'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40dcf809'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x320'
|
|
|
+ rdi: '0x320'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40dcf6c8'
|
|
|
+ rsp: '0x8c40dcf698'
|
|
|
+ - crashed: false
|
|
|
+ id: 8276
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75482017b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759452a10'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75797c3f0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c40def4b8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cc40'
|
|
|
+ r14: '0x328'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40def589'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x328'
|
|
|
+ rdi: '0x328'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40def448'
|
|
|
+ rsp: '0x8c40def418'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c40def4b8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cc40'
|
|
|
+ r14: '0x328'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40def589'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x328'
|
|
|
+ rdi: '0x328'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40def448'
|
|
|
+ rsp: '0x8c40def418'
|
|
|
+ - crashed: false
|
|
|
+ id: 7604
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b27e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cb00'
|
|
|
+ r14: '0x330'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40e0f6c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x330'
|
|
|
+ rdi: '0x330'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40e0f588'
|
|
|
+ rsp: '0x8c40e0f558'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918cb00'
|
|
|
+ r14: '0x330'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40e0f6c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x330'
|
|
|
+ rdi: '0x330'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40e0f588'
|
|
|
+ rsp: '0x8c40e0f558'
|
|
|
+ - crashed: false
|
|
|
+ id: 8056
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b27e'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c40e2f8d8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918ccc0'
|
|
|
+ r14: '0x338'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40e2f9a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x338'
|
|
|
+ rdi: '0x338'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40e2f868'
|
|
|
+ rsp: '0x8c40e2f838'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c40e2f8d8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df918ccc0'
|
|
|
+ r14: '0x338'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c40e2f9a9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x338'
|
|
|
+ rdi: '0x338'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c40e2f868'
|
|
|
+ rsp: '0x8c40e2f838'
|
|
|
+ - crashed: false
|
|
|
+ id: 7540
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754f680be'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75518c971'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5e9a'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x8c412ff828'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0xa'
|
|
|
+ rdx: '0x8c412ff850'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c412ff828'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x8c412ff828'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0xa'
|
|
|
+ rdx: '0x8c412ff850'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c412ff828'
|
|
|
+ - crashed: false
|
|
|
+ id: 9920
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756780450'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5e9a'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x8c4131fd08'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x21'
|
|
|
+ rdx: '0x8c4131fd30'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4131fd08'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x8c4131fd08'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x21'
|
|
|
+ rdx: '0x8c4131fd30'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4131fd08'
|
|
|
+ - crashed: false
|
|
|
+ id: 4264
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754b6efc6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754efc17c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754f0021d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e19759'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758ae6d48'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a671f8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90dfa80'
|
|
|
+ r14: '0x3d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4133f6f8'
|
|
|
+ r9: '0x8c4133f869'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4133f869'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x3d4'
|
|
|
+ rdi: '0x3d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4133f728'
|
|
|
+ rsp: '0x8c4133f6f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90dfa80'
|
|
|
+ r14: '0x3d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4133f6f8'
|
|
|
+ r9: '0x8c4133f869'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4133f869'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x3d4'
|
|
|
+ rdi: '0x3d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4133f728'
|
|
|
+ rsp: '0x8c4133f6f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 2548
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75517fbb1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e5b0000'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90decc0'
|
|
|
+ r14: '0x460'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4135fcd9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x460'
|
|
|
+ rdi: '0x460'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4135fb98'
|
|
|
+ rsp: '0x8c4135fb68'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x23d8e5b0000'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90decc0'
|
|
|
+ r14: '0x460'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x10000'
|
|
|
+ r9: '0xcdcdcdcdcdcdcdcd'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4135fcd9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x460'
|
|
|
+ rdi: '0x460'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4135fb98'
|
|
|
+ rsp: '0x8c4135fb68'
|
|
|
+ - crashed: false
|
|
|
+ id: 3060
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75517fbb1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c4137fa88'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90deee0'
|
|
|
+ r14: '0x46c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4137fa18'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4137fb59'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x46c'
|
|
|
+ rdi: '0x46c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4137fa18'
|
|
|
+ rsp: '0x8c4137f9e8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c4137fa88'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90deee0'
|
|
|
+ r14: '0x46c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4137fa18'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4137fb59'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x46c'
|
|
|
+ rdi: '0x46c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4137fa18'
|
|
|
+ rsp: '0x8c4137f9e8'
|
|
|
+ - crashed: false
|
|
|
+ id: 664
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90dd3e0'
|
|
|
+ r14: '0x474'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4139fa83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4139fb79'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x474'
|
|
|
+ rdi: '0x474'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4139fa38'
|
|
|
+ rsp: '0x8c4139fa08'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90dd3e0'
|
|
|
+ r14: '0x474'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4139fa83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4139fb79'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x474'
|
|
|
+ rdi: '0x474'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4139fa38'
|
|
|
+ rsp: '0x8c4139fa08'
|
|
|
+ - crashed: false
|
|
|
+ id: 3028
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e44d8d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e449af'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75517fbb1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90df340'
|
|
|
+ r14: '0x47c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c413bf8c8'
|
|
|
+ r9: '0x8c413bfa39'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c413bfa39'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x47c'
|
|
|
+ rdi: '0x47c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c413bf8f8'
|
|
|
+ rsp: '0x8c413bf8c8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df90df340'
|
|
|
+ r14: '0x47c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c413bf8c8'
|
|
|
+ r9: '0x8c413bfa39'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c413bfa39'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x47c'
|
|
|
+ rdi: '0x47c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c413bf8f8'
|
|
|
+ rsp: '0x8c413bf8c8'
|
|
|
+ - crashed: false
|
|
|
+ id: 964
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe1007f856'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7327fc8'
|
|
|
+ r11: '0x7ffe10178b20'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7320b30'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x23d83380000'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23dfa7338e0'
|
|
|
+ rcx: '0x10'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23dfa7338e0'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c4223f9f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7327fc8'
|
|
|
+ r11: '0x7ffe10178b20'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7320b30'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x23d83380000'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23dfa7338e0'
|
|
|
+ rcx: '0x10'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23dfa7338e0'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c4223f9f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 9124
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7559e6610'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754f70c36'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754f2efca'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7559ccee1'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7559e7c57'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8235b880'
|
|
|
+ r14: '0x694'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418bfb83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418bfd49'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x694'
|
|
|
+ rdi: '0x694'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418bfc08'
|
|
|
+ rsp: '0x8c418bfbd8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8235b880'
|
|
|
+ r14: '0x694'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418bfb83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418bfd49'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x694'
|
|
|
+ rdi: '0x694'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418bfc08'
|
|
|
+ rsp: '0x8c418bfbd8'
|
|
|
+ - crashed: false
|
|
|
+ id: 9264
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e4b37f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff756cba688'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d821716c0'
|
|
|
+ r14: '0x4f4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4270fc08'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4270fb89'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4f4'
|
|
|
+ rdi: '0x4f4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4270fa48'
|
|
|
+ rsp: '0x8c4270fa18'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d821716c0'
|
|
|
+ r14: '0x4f4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4270fc08'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4270fb89'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4f4'
|
|
|
+ rdi: '0x4f4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4270fa48'
|
|
|
+ rsp: '0x8c4270fa18'
|
|
|
+ - crashed: false
|
|
|
+ id: 7528
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10083140'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe1007f856'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x7ffe00d599b6'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7320b30'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x50'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23d833a5830'
|
|
|
+ rcx: '0x10'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23d833a5830'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c42bdfa78'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fd854'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x7ffe00d599b6'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df7320b30'
|
|
|
+ r14: '0x7ffe10080a60'
|
|
|
+ r15: '0x7ffe10081350'
|
|
|
+ r8: '0x50'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x1cb'
|
|
|
+ rbp: '0x0'
|
|
|
+ rbx: '0x23d833a5830'
|
|
|
+ rcx: '0x10'
|
|
|
+ rdi: '0x10'
|
|
|
+ rdx: '0x23d833a5830'
|
|
|
+ rip: '0x7ffe100fd854'
|
|
|
+ rsi: '0x7ffe10083140'
|
|
|
+ rsp: '0x8c42bdfa78'
|
|
|
+ - crashed: false
|
|
|
+ id: 4136
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e526d4c'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e4f102e'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e491671'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e4b8b37'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e48dff0'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10072b55'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99be3'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100a70e0'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10073755'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100795c8'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10077f34'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe101ba460'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10078044'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100793e8'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0e494217'
|
|
|
+ package: C:\Windows\System32\combase.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa75f9'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10072b55'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100a70e0'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d305b'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10060000'
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d311e'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10091b96'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10091b76'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe07679bf0'
|
|
|
+ package: C:\Windows\System32\RTWorkQ.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe10091bae'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe07679bf0'
|
|
|
+ package: C:\Windows\System32\RTWorkQ.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa6099'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100faa54'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x0'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x8c430af960'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x97'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x5b'
|
|
|
+ rbp: '0x650'
|
|
|
+ rbx: '0x1'
|
|
|
+ rcx: '0x1'
|
|
|
+ rdi: '0x1'
|
|
|
+ rdx: '0x8c430af960'
|
|
|
+ rip: '0x7ffe100faa54'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c430af608'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100faa54'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x0'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x8c430af960'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x97'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x5b'
|
|
|
+ rbp: '0x650'
|
|
|
+ rbx: '0x1'
|
|
|
+ rcx: '0x1'
|
|
|
+ rdi: '0x1'
|
|
|
+ rdx: '0x8c430af960'
|
|
|
+ rip: '0x7ffe100faa54'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c430af608'
|
|
|
+ - crashed: false
|
|
|
+ id: 10520
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8235c4e0'
|
|
|
+ r14: '0x5a0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418df683'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418df7c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x5a0'
|
|
|
+ rdi: '0x5a0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418df688'
|
|
|
+ rsp: '0x8c418df658'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8235c4e0'
|
|
|
+ r14: '0x5a0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418df683'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418df7c9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x5a0'
|
|
|
+ rdi: '0x5a0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418df688'
|
|
|
+ rsp: '0x8c418df658'
|
|
|
+ - crashed: false
|
|
|
+ id: 10828
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823598a0'
|
|
|
+ r14: '0x4e0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418ff983'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418ffad9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4e0'
|
|
|
+ rdi: '0x4e0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418ff998'
|
|
|
+ rsp: '0x8c418ff968'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823598a0'
|
|
|
+ r14: '0x4e0'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c418ff983'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c418ffad9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4e0'
|
|
|
+ rdi: '0x4e0'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c418ff998'
|
|
|
+ rsp: '0x8c418ff968'
|
|
|
+ - crashed: false
|
|
|
+ id: 6428
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359820'
|
|
|
+ r14: '0x4d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4191f683'
|
|
|
+ r9: '0x8c4191f7b9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4191f7b9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4d4'
|
|
|
+ rdi: '0x4d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4191f678'
|
|
|
+ rsp: '0x8c4191f648'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359820'
|
|
|
+ r14: '0x4d4'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4191f683'
|
|
|
+ r9: '0x8c4191f7b9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4191f7b9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x4d4'
|
|
|
+ rdi: '0x4d4'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4191f678'
|
|
|
+ rsp: '0x8c4191f648'
|
|
|
+ - crashed: false
|
|
|
+ id: 11276
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823597e0'
|
|
|
+ r14: '0x64c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4193f788'
|
|
|
+ r9: '0x8c4193f8f9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4193f8f9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x64c'
|
|
|
+ rdi: '0x64c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4193f7b8'
|
|
|
+ rsp: '0x8c4193f788'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823597e0'
|
|
|
+ r14: '0x64c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4193f788'
|
|
|
+ r9: '0x8c4193f8f9'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4193f8f9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x64c'
|
|
|
+ rdi: '0x64c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4193f7b8'
|
|
|
+ rsp: '0x8c4193f788'
|
|
|
+ - crashed: false
|
|
|
+ id: 11076
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c4195f7a8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823597a0'
|
|
|
+ r14: '0x804'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4195f879'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x804'
|
|
|
+ rdi: '0x804'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4195f738'
|
|
|
+ rsp: '0x8c4195f708'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x8c4195f7a8'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823597a0'
|
|
|
+ r14: '0x804'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4195f879'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x804'
|
|
|
+ rdi: '0x804'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4195f738'
|
|
|
+ rsp: '0x8c4195f708'
|
|
|
+ - crashed: false
|
|
|
+ id: 9748
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359000'
|
|
|
+ r14: '0x80c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4197f9c8'
|
|
|
+ r9: '0x8c4197fb39'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4197fb39'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x80c'
|
|
|
+ rdi: '0x80c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4197f9f8'
|
|
|
+ rsp: '0x8c4197f9c8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359000'
|
|
|
+ r14: '0x80c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4197f9c8'
|
|
|
+ r9: '0x8c4197fb39'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4197fb39'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x80c'
|
|
|
+ rdi: '0x80c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4197f9f8'
|
|
|
+ rsp: '0x8c4197f9c8'
|
|
|
+ - crashed: false
|
|
|
+ id: 6820
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359760'
|
|
|
+ r14: '0x814'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4199fa83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4199fc09'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x814'
|
|
|
+ rdi: '0x814'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4199fac8'
|
|
|
+ rsp: '0x8c4199fa98'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d82359760'
|
|
|
+ r14: '0x814'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c4199fa83'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4199fc09'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x814'
|
|
|
+ rdi: '0x814'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c4199fac8'
|
|
|
+ rsp: '0x8c4199fa98'
|
|
|
+ - crashed: false
|
|
|
+ id: 5932
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7549e3f3d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823592c0'
|
|
|
+ r14: '0x81c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c419bf683'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c419bf819'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x81c'
|
|
|
+ rdi: '0x81c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c419bf6d8'
|
|
|
+ rsp: '0x8c419bf6a8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d823592c0'
|
|
|
+ r14: '0x81c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x8c419bf683'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c419bf819'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x81c'
|
|
|
+ rdi: '0x81c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c419bf6d8'
|
|
|
+ rsp: '0x8c419bf6a8'
|
|
|
+ - crashed: false
|
|
|
+ id: 10672
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757fb47f2'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758adc9f8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c419df480'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23dfc965440'
|
|
|
+ r14: '0x54c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23d82170c60'
|
|
|
+ r9: '0x20'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c419df769'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x54c'
|
|
|
+ rdi: '0x54c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c419df628'
|
|
|
+ rsp: '0x8c419df5f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c419df480'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23dfc965440'
|
|
|
+ r14: '0x54c'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x23d82170c60'
|
|
|
+ r9: '0x20'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c419df769'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x54c'
|
|
|
+ rdi: '0x54c'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x8c419df628'
|
|
|
+ rsp: '0x8c419df5f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 3096
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e4b37f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff757aaf081'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551976c3'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3b984'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5e9a'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x23df9a31050'
|
|
|
+ r8: '0x8c419efd38'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x8c419efcc9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x3e8'
|
|
|
+ rdx: '0x8c419efb80'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c419efb58'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x0'
|
|
|
+ r11: '0x246'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x0'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x23df9a31050'
|
|
|
+ r8: '0x8c419efd38'
|
|
|
+ r9: '0x0'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x8c419efcc9'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x3e8'
|
|
|
+ rdx: '0x8c419efb80'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c419efb58'
|
|
|
+ - crashed: false
|
|
|
+ id: 10944
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdd9762b8a'
|
|
|
+ package: C:\Windows\System32\XAudio2_7.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5f8e'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdd9762891'
|
|
|
+ package: C:\Windows\System32\XAudio2_7.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdd97635b6'
|
|
|
+ package: C:\Windows\System32\XAudio2_7.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5f8e'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdde41bf48'
|
|
|
+ package: C:\Windows\System32\AudioSes.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdde31468b'
|
|
|
+ package: C:\Windows\System32\AudioSes.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca886f2'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdde314507'
|
|
|
+ package: C:\Windows\System32\AudioSes.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca886f2'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdde41bf48'
|
|
|
+ package: C:\Windows\System32\AudioSes.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffdde3128e1'
|
|
|
+ package: C:\Windows\System32\AudioSes.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa6099'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100faa54'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x23d8d4b3848'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8d4b1088'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x8c4357f730'
|
|
|
+ rax: '0x5b'
|
|
|
+ rbp: '0x8c4357f940'
|
|
|
+ rbx: '0x3'
|
|
|
+ rcx: '0x3'
|
|
|
+ rdi: '0x3'
|
|
|
+ rdx: '0x23d8d4b1088'
|
|
|
+ rip: '0x7ffe100faa54'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4357f4f8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100faa54'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x23d8d4b3848'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23d8d4b1088'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x0'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x8c4357f730'
|
|
|
+ rax: '0x5b'
|
|
|
+ rbp: '0x8c4357f940'
|
|
|
+ rbx: '0x3'
|
|
|
+ rcx: '0x3'
|
|
|
+ rdi: '0x3'
|
|
|
+ rdx: '0x23d8d4b1088'
|
|
|
+ rip: '0x7ffe100faa54'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4357f4f8'
|
|
|
+ - crashed: false
|
|
|
+ id: 7648
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8ca09'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d7a570'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c43a4eff0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19d60'
|
|
|
+ r14: '0x288'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c43a4f649'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x288'
|
|
|
+ rdi: '0x288'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c43a4f4d8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x23df7346090'
|
|
|
+ r11: '0x8c43a4eff0'
|
|
|
+ r12: '0x1'
|
|
|
+ r13: '0x23df8d19d60'
|
|
|
+ r14: '0x288'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x0'
|
|
|
+ r9: '0x1'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c43a4f649'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x288'
|
|
|
+ rdi: '0x288'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c43a4f4d8'
|
|
|
+ - crashed: false
|
|
|
+ id: 612
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e4b37f'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7566cc3d7'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7566cbf67'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8d176'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75501f8fc'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75504b92d'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754da6f49'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754dc5267'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7544e0000'
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e349d6'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8ca09'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1e2338'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75a1e2338'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d89952'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff755199769'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8f221'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754e3419b'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0ca99252'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df8d19ea0'
|
|
|
+ r14: '0x298'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x7ff75a3e20d0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4188f919'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x298'
|
|
|
+ rdi: '0x298'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4188f7a8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100f9f84'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x23df8d19ea0'
|
|
|
+ r14: '0x298'
|
|
|
+ r15: '0x23df9a304c8'
|
|
|
+ r8: '0x1'
|
|
|
+ r9: '0x7ff75a3e20d0'
|
|
|
+ rax: '0x4'
|
|
|
+ rbp: '0x8c4188f919'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x298'
|
|
|
+ rdi: '0x298'
|
|
|
+ rdx: '0x0'
|
|
|
+ rip: '0x7ffe100f9f84'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4188f7a8'
|
|
|
+ - crashed: false
|
|
|
+ id: 10900
|
|
|
+ raw_stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100d1471'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0fd53034'
|
|
|
+ package: C:\Windows\System32\kernel32.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff75519224c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551971e8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7566cc508'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a671f8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759054684'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7566be97c'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff759054684'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7566ce2a3'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a670b0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754db0220'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff758a67a48'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d8f4e0'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff7551976c3'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ff754d7feb8'
|
|
|
+ package: \\Mac\Home\Desktop\WindowsNoEditor\YetAnother\Binaries\Win64\YetAnother.exe
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe0caa5e9a'
|
|
|
+ package: C:\Windows\System32\KERNELBASE.dll
|
|
|
+ trust: scan
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x7ff758a67a48'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x23df9a31050'
|
|
|
+ r8: '0xff'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x8c4189fd19'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x6'
|
|
|
+ rdx: '0x8c4189fbd0'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4189fba8'
|
|
|
+ stacktrace:
|
|
|
+ frames:
|
|
|
+ - in_app: false
|
|
|
+ instruction_addr: '0x7ffe100fa584'
|
|
|
+ package: C:\Windows\System32\ntdll.dll
|
|
|
+ trust: context
|
|
|
+ registers:
|
|
|
+ r10: '0x7ffef000'
|
|
|
+ r11: '0x1'
|
|
|
+ r12: '0x0'
|
|
|
+ r13: '0x7ff758a67a48'
|
|
|
+ r14: '0x0'
|
|
|
+ r15: '0x23df9a31050'
|
|
|
+ r8: '0xff'
|
|
|
+ r9: '0xfffffffffe7f6361'
|
|
|
+ rax: '0x34'
|
|
|
+ rbp: '0x8c4189fd19'
|
|
|
+ rbx: '0x0'
|
|
|
+ rcx: '0x0'
|
|
|
+ rdi: '0x6'
|
|
|
+ rdx: '0x8c4189fbd0'
|
|
|
+ rip: '0x7ffe100fa584'
|
|
|
+ rsi: '0x0'
|
|
|
+ rsp: '0x8c4189fba8'
|