IOC Report
SteamSetup.exe

loading gif

Files

File Path
Type
Category
Malicious
SteamSetup.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
C:\Users\user\AppData\Local\Programs\SteamClient\is-0A2IM.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Programs\SteamClient\is-EL3N4.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Programs\SteamClient\is-H6DF9.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Programs\SteamClient\Accessibility.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\D3DCompiler_47_cor3.dll (copy)
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\DirectWriteForwarder.dll (copy)
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.CSharp.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.DiaSymReader.Native.amd64.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.VisualBasic.Core.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.VisualBasic.Forms.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.VisualBasic.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.Win32.Primitives.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.Win32.Registry.AccessControl.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.Win32.Registry.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Microsoft.Win32.SystemEvents.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PenImc_cor3.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationCore.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework-SystemCore.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework-SystemData.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework-SystemDrawing.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework-SystemXml.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework-SystemXmlLinq.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.Aero.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.Aero2.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.AeroLite.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.Classic.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.Luna.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.Royale.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationFramework.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationNative_cor3.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\PresentationUI.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\ReachFramework.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Steam2.dll (copy)
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\Steam2.exe (copy)
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\SteamKit2.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\SteamKit2.xml (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.AppContext.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Buffers.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.CodeDom.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Collections.Concurrent.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Collections.Immutable.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Collections.NonGeneric.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Collections.Specialized.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Collections.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.Annotations.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.DataAnnotations.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.EventBasedAsync.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.Primitives.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.TypeConverter.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ComponentModel.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Configuration.ConfigurationManager.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Configuration.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Console.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Core.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Data.Common.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Data.DataSetExtensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Data.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Design.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.Contracts.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.Debug.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.DiagnosticSource.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.EventLog.Messages.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.EventLog.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.FileVersionInfo.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.PerformanceCounter.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.Process.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.StackTrace.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.TextWriterTraceListener.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.Tools.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.TraceSource.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Diagnostics.Tracing.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.DirectoryServices.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Drawing.Common.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Drawing.Design.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Drawing.Primitives.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Drawing.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Dynamic.Runtime.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Formats.Asn1.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Formats.Tar.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Globalization.Calendars.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Globalization.Extensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Globalization.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Compression.Brotli.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Compression.FileSystem.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Compression.Native.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Compression.ZipFile.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Compression.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.FileSystem.AccessControl.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.FileSystem.DriveInfo.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.FileSystem.Primitives.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.FileSystem.Watcher.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.FileSystem.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Hashing.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.IsolatedStorage.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.MemoryMappedFiles.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Packaging.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Pipes.AccessControl.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.Pipes.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.UnmanagedMemoryStream.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.IO.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Linq.Expressions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Linq.Parallel.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Linq.Queryable.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Linq.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Memory.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Http.Json.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Http.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.HttpListener.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Mail.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.NameResolution.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.NetworkInformation.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Ping.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Primitives.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Quic.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Requests.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Security.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.ServicePoint.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.Sockets.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.WebClient.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.WebHeaderCollection.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.WebProxy.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.WebSockets.Client.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.WebSockets.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Net.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Numerics.Vectors.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Numerics.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ObjectModel.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Printing.dll (copy)
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Private.CoreLib.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Private.DataContractSerialization.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Private.Uri.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Private.Xml.Linq.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Private.Xml.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.DispatchProxy.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Emit.ILGeneration.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Emit.Lightweight.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Emit.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Extensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Metadata.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.Primitives.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.TypeExtensions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Reflection.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Resources.Extensions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Resources.Reader.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Resources.ResourceManager.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Resources.Writer.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.CompilerServices.Unsafe.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.CompilerServices.VisualC.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Extensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Handles.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.InteropServices.JavaScript.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.InteropServices.RuntimeInformation.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.InteropServices.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Intrinsics.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Loader.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Numerics.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Serialization.Formatters.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Serialization.Json.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Serialization.Primitives.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Serialization.Xml.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.Serialization.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Runtime.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.AccessControl.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Claims.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Algorithms.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Cng.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Csp.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Encoding.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.OpenSsl.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Pkcs.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Primitives.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.ProtectedData.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.X509Certificates.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.Xml.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Cryptography.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Permissions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Principal.Windows.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.Principal.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.SecureString.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Security.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ServiceModel.Web.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ServiceProcess.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.Encoding.CodePages.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.Encoding.Extensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.Encoding.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.Encodings.Web.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.Json.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Text.RegularExpressions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.AccessControl.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Channels.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Overlapped.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Tasks.Dataflow.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Tasks.Extensions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Tasks.Parallel.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Tasks.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Thread.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.ThreadPool.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.Timer.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Threading.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Transactions.Local.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Transactions.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.ValueTuple.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Web.HttpUtility.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Web.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Controls.Ribbon.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Extensions.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Forms.Design.Editors.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Forms.Design.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Forms.Primitives.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Forms.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Input.Manipulations.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.Presentation.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Windows.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xaml.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.Linq.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.ReaderWriter.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.Serialization.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.XDocument.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.XPath.XDocument.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.XPath.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.XmlDocument.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.XmlSerializer.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.Xml.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\System.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\UIAutomationClient.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\UIAutomationClientSideProviders.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\UIAutomationProvider.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\UIAutomationTypes.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\WindowsBase.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\WindowsFormsIntegration.dll (copy)
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\clretwrc.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\clrgc.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\clrjit.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\coreclr.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\createdump.exe (copy)
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\hostfxr.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\hostpolicy.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-03T8C.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-06ALL.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-07LBE.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0AA2H.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0BV5K.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0CFKI.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0ED3E.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0I40G.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0KAJQ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0QI8B.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0R4RR.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0R6D5.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-0TTDC.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-1274N.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-160D2.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-16F0N.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-175RN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-1GT60.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-1P5NQ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-1SION.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-21558.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-219L9.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-23N9N.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-2ACL7.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-2E66P.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-2TVF9.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-2UHB1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-2VB07.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-322AN.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-353H2.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-393CK.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3CV6V.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3DQQ4.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3GH17.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3II23.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3J2EH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3NS6I.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3T158.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-3U4SF.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-41G2F.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-46PES.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-4IO64.tmp
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-4JUH3.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-4O1SG.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-4RNUS.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-54V5Q.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-5A8TQ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-5I1AN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-5R65M.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-5UA7J.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-621DK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-624HU.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6A3I2.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6E0AB.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6FLE2.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6KRKJ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6UJNJ.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-6UT8P.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7D57R.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7F6KI.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7IP4F.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7JPAQ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7PK1K.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-7V7V0.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-80BQ8.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-82OGO.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-83U1I.tmp
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-842D2.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-85E29.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-85LFJ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-8JNSQ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-8O1SP.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-8Q6ES.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-8SOAE.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-9A0PH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-9GBK7.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-9H3PC.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-9K5SP.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-9VBVU.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-AJ60V.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-B0N4M.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-B4T90.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BGSNO.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BMK4J.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BPLBO.tmp
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BRU3O.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BSKQN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-BV18A.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C0NRL.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C1QE8.tmp
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C1TIS.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C4PDK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C4VI1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C6SPK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-C8Q0I.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-CB3FM.tmp
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-CDVC3.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-CG1VF.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-CO8N6.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-CTNSH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-D583Q.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-D5RPK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-DE47S.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-DN9A9.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-E52FV.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-E537O.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-E704A.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-E88LT.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-E917C.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-EPD79.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-ERNCA.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-EVMTH.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-F7HS6.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FER0U.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FFGT1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FGBU1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FHTIL.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FPFGC.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FQLAJ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FUJRK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FUODR.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-FVIIK.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-G5ANC.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-G721R.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-G8384.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-G9TVR.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-GK1S4.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-GOJFJ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-H3VRF.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HF7IL.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HKSM3.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HQ8MG.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HT29O.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HTHBE.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HUU3F.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-HVE4F.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-I9KME.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IBGJR.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-ICB9T.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IDQQK.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IIQJM.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IJCCG.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IKSD2.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IM89D.tmp
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IOHDI.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-ISS47.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-IU0LQ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-J1ACH.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-J4F54.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-J5A62.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-J5Q53.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-J5UVU.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-JIDK5.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-JS4JU.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-JT9R1.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-K613I.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-KM93B.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-KPNTM.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-KSMQT.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-KTNL3.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-L7DHN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-L9IRH.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-LB3BN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-LFOPB.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-LKC3R.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-LMELL.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-M0K5L.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-M1IBB.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-M4HRH.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-M7PK8.tmp
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-MJMLB.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-MQH5V.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-MQN3F.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-MT7MH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-N0JVU.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-N6T5R.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NA0P8.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NBGUE.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NES76.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NGLMS.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NH22G.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NI148.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NJOP7.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NK6GU.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NMQB8.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NMQLB.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-NOPIK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-O2VS5.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-O5P26.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-O9S7G.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OD7NK.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OEM2B.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OF9H5.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OFR4B.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OHS2U.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OL3NB.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OLKB5.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OMLDU.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OMU5T.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-OS7F4.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-P1CEB.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-PCJI1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-PJDI3.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-PP8SL.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-PR1SN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-PS2Q9.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-QB0O9.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-QLJJ1.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-QQFQ0.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-QQMQ0.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-R29DJ.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-R4HMS.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RH90K.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RMN2A.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RNA4A.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RPC5P.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RQKJN.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RT9LP.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-RUGAU.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-S7M74.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-S9871.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-S9H2V.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-SA04C.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-SELO9.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-SG76T.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-SHJIR.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-SNOP4.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-T2AEF.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-T8PJ7.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-TAUBR.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-TC3UL.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-TH0C6.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-TK2A2.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-U5CAB.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-U5R7O.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-UCH6K.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-URA97.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-V1K2R.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-V5O72.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-V92IG.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-VBC6I.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-VC35U.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\is-VE7BR.tmp
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\mscordaccore.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\mscordaccore_amd64_amd64_8.0.824.36612.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\mscordbi.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\mscorlib.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\mscorrc.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\msquic.dll (copy)
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\netstandard.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\protobuf-net.Core.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\protobuf-net.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\unins000.dat
InnoSetup Log Steam {97C23183-77ED-457C-90C7-3FA73E699316}, version 0x418, 48687 bytes, 657773\37\user\376, C:\Users\user\AppData\Local\Programs\Stea
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\unins000.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\vcruntime140_cor3.dll (copy)
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Programs\SteamClient\wpfgfx_cor3.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\is-457S0.tmp\_isetup\_setup64.tmp
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\is-CVTB5.tmp\SteamSetup.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Nov 19 22:00:10 2024, mtime=Tue Nov 19 22:00:10 2024, atime=Fri Oct 18 04:36:24 2024, length=158720, window=hide
dropped
There are 487 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SteamSetup.exe
"C:\Users\user\Desktop\SteamSetup.exe"
C:\Users\user\AppData\Local\Temp\is-CVTB5.tmp\SteamSetup.tmp
"C:\Users\user\AppData\Local\Temp\is-CVTB5.tmp\SteamSetup.tmp" /SL5="$10472,49358704,796160,C:\Users\user\Desktop\SteamSetup.exe"
C:\Users\user\AppData\Local\Programs\SteamClient\Steam2.exe
"C:\Users\user\AppData\Local\Programs\SteamClient\Steam2.exe"

URLs

Name
IP
Malicious
https://github.com/dotnet/runtime;
unknown
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
unknown
https://www.steam.com/Q6C
unknown
https://aka.ms/dotnet/info
unknown
https://github.com/dotnet/wpf
unknown
https://cmp1-iad1.steamserver.net/cmsocket/
162.254.192.98
https://github.com/mono/linker/issues/1416.
unknown
https://cmp2-dfw1.steamserver.net/cmsocket/
155.133.253.52
https://aka.ms/dotnet-core-applaunch?Architecture:
unknown
https://aka.ms/dotnet/app-launch-failed
unknown
http://uri.etsi.org/01903/v1.2.2#bhttp://uri.etsi.org/01903/v1.2.2#SignedProperties
unknown
https://cmp2-iad1.steamserver.net/cmsocket/
162.254.192.99
https://aka.ms/dotnet/sdk-not-foundFailed
unknown
https://aka.ms/dotnet-core-applaunch?
unknown
https://github.com/dotnet/runtime0
unknown
https://aka.ms/dotnet/downloadUsage:
unknown
https://github.com/dotnet/runtime
unknown
https://github.com/dotnet/runtimer
unknown
http://uri.etsi.org/01903/v1.2.2#SignedProperties
unknown
https://github.com/dotnet/runtimezX
unknown
https://github.com/mono/linker/issues/1981
unknown
https://cmp2-atl3.steamserver.net/cmsocket/
162.254.199.184
https://aka.ms/dotnet-core-applaunch?framework=&framework_version=missing_runtime=true&arch=&rid=&os
unknown
http://uri.etsi.org/01903/v1.2.2#SSOFTWARE
unknown
https://aka.ms/dotnet-warnings/
unknown
https://github.com/dotnet/winforms
unknown
https://github.com/dotnet/wpf4
unknown
https://www.remobjects.com/ps
unknown
https://github.com/mono/linker/issues/1906.
unknown
https://aka.ms/serializationformat-binary-obsolete
unknown
https://www.innosetup.com/
unknown
https://api.steampowered.com/ISteamDirectory/GetCMListForConnect/v1/?format=vdf&cellid=0
104.102.49.254
https://aka.ms/binaryformatter
unknown
https://github.com/dotnet/linker/issues/2715.
unknown
https://github.com/dotnet/runtimeH
unknown
https://aka.ms/dotnet/download
unknown
https://github.com/mono/linker/issues/1187
unknown
https://www.steam.com/
unknown
https://cmp1-dfw1.steamserver.net/cmsocket/
155.133.253.36
https://www.steam.com/Q9Q
unknown
There are 30 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
cmp1-atl3.steamserver.net
162.254.199.165
api.steampowered.com
104.102.49.254
cmp2-iad1.steamserver.net
162.254.192.99
cmp1-dfw1.steamserver.net
155.133.253.36
cmp2-atl3.steamserver.net
162.254.199.184
cmp2-dfw1.steamserver.net
155.133.253.52
cmp1-iad1.steamserver.net
162.254.192.98
198.187.3.20.in-addr.arpa
unknown

IPs

IP
Domain
Country
Malicious
162.254.199.165
cmp1-atl3.steamserver.net
United States
155.133.253.52
cmp2-dfw1.steamserver.net
Germany
162.254.199.184
cmp2-atl3.steamserver.net
United States
104.102.49.254
api.steampowered.com
United States
155.133.253.36
cmp1-dfw1.steamserver.net
Germany
162.254.192.98
cmp1-iad1.steamserver.net
United States
162.254.192.99
cmp2-iad1.steamserver.net
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0001
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: Setup Version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: App Path
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
InstallLocation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: Icon Group
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: User
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: Selected Tasks
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: Deselected Tasks
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Inno Setup: Language
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
UninstallString
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
QuietUninstallString
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
DisplayVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
Publisher
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
URLInfoAbout
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
HelpLink
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
URLUpdateInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
NoModify
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
NoRepair
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
InstallDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
MajorVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
MinorVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
VersionMajor
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
VersionMinor
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97C23183-77ED-457C-90C7-3FA73E699316}_is1
EstimatedSize
There are 20 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
30DFAB16000
heap
page read and write
30DFF4B7000
heap
page read and write
30DFF3DA000
heap
page read and write
30DFCBAD000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF53D000
heap
page read and write
30DFAC80000
heap
page read and write
30E0229F000
heap
page read and write
401000
unkown
page execute read
2472000
direct allocation
page read and write
30E0216C000
heap
page read and write
30E02437000
heap
page read and write
30E02322000
heap
page read and write
30E02240000
direct allocation
page read and write
30E01F90000
trusted library allocation
page read and write
30E021CC000
heap
page read and write
30DFF428000
heap
page read and write
30DFF14D000
heap
page read and write
30E02367000
heap
page read and write
30E021CC000
heap
page read and write
30DFCD74000
heap
page read and write
30DFF39C000
heap
page read and write
30E02367000
heap
page read and write
30E02187000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF4EE000
heap
page read and write
6F4000
unkown
page readonly
30E02187000
heap
page read and write
30DFF3A6000
heap
page read and write
3A90000
heap
page read and write
30E02187000
heap
page read and write
30DFF22B000
heap
page read and write
30DFCFAA000
heap
page read and write
968000
heap
page read and write
30E022DB000
heap
page read and write
30DFF1A7000
heap
page read and write
30E023A5000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFF40F000
heap
page read and write
30DFAC57000
heap
page read and write
30DFF308000
heap
page read and write
30E02213000
heap
page read and write
C30000
heap
page read and write
30E02210000
heap
page read and write
30DFF4DE000
heap
page read and write
30DFEFEA000
heap
page read and write
30DFF55A000
heap
page read and write
30E022A6000
heap
page read and write
30DFCE7E000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF40A000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFF560000
heap
page read and write
2468000
direct allocation
page read and write
30DFF308000
heap
page read and write
30E022B0000
heap
page read and write
8FE000
heap
page read and write
245B000
direct allocation
page read and write
91F000
heap
page read and write
30DFF2BA000
heap
page read and write
30E02210000
heap
page read and write
30DFAC45000
heap
page read and write
30E0229C000
heap
page read and write
2330000
direct allocation
page read and write
30DFF465000
heap
page read and write
30DFF52E000
heap
page read and write
30DFF360000
heap
page read and write
30DFAB7A000
heap
page read and write
30E020C1000
heap
page read and write
30E02430000
heap
page read and write
30DFEFEA000
heap
page read and write
30DFCB82000
heap
page read and write
30E024F9000
heap
page read and write
30E02210000
heap
page read and write
30DFCD93000
heap
page read and write
30DFAC75000
heap
page read and write
30E022DB000
heap
page read and write
30E01FC0000
trusted library allocation
page read and write
30DFCCB4000
heap
page read and write
4C0000
unkown
page read and write
30DFF53D000
heap
page read and write
30E02430000
heap
page read and write
30DFAC6F000
heap
page read and write
30DFF359000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFAC75000
heap
page read and write
90F000
heap
page read and write
30DFF71A000
heap
page read and write
30E02130000
heap
page read and write
30DFF3A6000
heap
page read and write
30E02210000
heap
page read and write
30DFF71A000
heap
page read and write
30DFEFF0000
heap
page read and write
30DFF718000
heap
page read and write
30DFF4AC000
heap
page read and write
30E02208000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFACB8000
heap
page read and write
30E0225A000
heap
page read and write
30DFEFCE000
heap
page read and write
30DFCE7E000
heap
page read and write
30E01F93000
trusted library allocation
page read and write
2397000
direct allocation
page read and write
30DFF474000
heap
page read and write
30DFF1F5000
heap
page read and write
2365000
direct allocation
page read and write
30DFF1F5000
heap
page read and write
30DFF4A9000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF379000
heap
page read and write
30E02790000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFAC1C000
heap
page read and write
30DFEFF0000
heap
page read and write
30DFF11A000
heap
page read and write
30E02208000
heap
page read and write
30DFF2CD000
heap
page read and write
30DFF715000
heap
page read and write
710000
heap
page read and write
30DFF3C3000
heap
page read and write
30DFF31A000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFCFAE000
heap
page read and write
23A6000
direct allocation
page read and write
30DFF46D000
heap
page read and write
30E02297000
heap
page read and write
30DFF715000
heap
page read and write
30E02213000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFEF97000
heap
page read and write
30DFF533000
heap
page read and write
30DFF379000
heap
page read and write
30DFF40F000
heap
page read and write
27A3000
heap
page read and write
30DFF3E8000
heap
page read and write
30DFF3C3000
heap
page read and write
30E02100000
heap
page read and write
30DFF428000
heap
page read and write
7F5000
heap
page read and write
30DFF428000
heap
page read and write
30DFF71A000
heap
page read and write
30DFCC54000
heap
page read and write
30E0257E000
heap
page read and write
30DFF1B3000
heap
page read and write
30DFAC8E000
heap
page read and write
30DFF02B000
heap
page read and write
30DFF029000
heap
page read and write
30DFF52E000
heap
page read and write
23F1000
direct allocation
page read and write
30DFCFB3000
heap
page read and write
30DFF110000
heap
page read and write
30DFF3A6000
heap
page read and write
30E02322000
heap
page read and write
30E0220C000
heap
page read and write
7FE36000
direct allocation
page read and write
30DFACA1000
heap
page read and write
2CD63F7B000
heap
page read and write
30DFF0D1000
heap
page read and write
C40000
heap
page read and write
24E8000
direct allocation
page read and write
30DFF14D000
heap
page read and write
30E02130000
heap
page read and write
30DFF6B3000
heap
page read and write
911000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFF715000
heap
page read and write
30E02187000
heap
page read and write
30DFACB8000
heap
page read and write
30DFF013000
heap
page read and write
30E021CC000
heap
page read and write
2CD63F66000
heap
page read and write
30DFF359000
heap
page read and write
30DFAC62000
heap
page read and write
30E02535000
heap
page read and write
30DFF0C7000
heap
page read and write
30DFAB17000
heap
page read and write
251A000
direct allocation
page read and write
30DFF4E6000
heap
page read and write
964000
heap
page read and write
30E02297000
heap
page read and write
30DFF0B5000
heap
page read and write
30E02364000
heap
page read and write
30E022DB000
heap
page read and write
30DFF308000
heap
page read and write
30DFCFA4000
heap
page read and write
30DFAC45000
heap
page read and write
30E0229F000
heap
page read and write
30DFCC92000
heap
page read and write
30E021C9000
heap
page read and write
30DFCFA2000
heap
page read and write
3896000
direct allocation
page read and write
30DFF165000
heap
page read and write
30DFF4E1000
heap
page read and write
2429000
direct allocation
page read and write
30DFF308000
heap
page read and write
30DFF041000
heap
page read and write
30DFEF99000
heap
page read and write
30DFAC59000
heap
page read and write
30DFF025000
heap
page read and write
30E022DC000
heap
page read and write
30E02187000
heap
page read and write
30DFCC24000
heap
page read and write
2CD63F6A000
heap
page read and write
30DFAB79000
heap
page read and write
30E02693000
heap
page read and write
30DFCC97000
heap
page read and write
30DFF4FE000
heap
page read and write
30DFF428000
heap
page read and write
30E0270F000
heap
page read and write
30DFAB57000
heap
page read and write
30DFABB0000
heap
page read and write
30DFF3CA000
heap
page read and write
30E023EB000
heap
page read and write
30DFF157000
heap
page read and write
912000
heap
page read and write
30E024F6000
heap
page read and write
30DFF14D000
heap
page read and write
30E0220C000
heap
page read and write
30E021D3000
heap
page read and write
6C9000
unkown
page read and write
30DFF308000
heap
page read and write
30DFF2BF000
heap
page read and write
30DFF308000
heap
page read and write
30DFF2B9000
heap
page read and write
30E02429000
heap
page read and write
30E02157000
heap
page read and write
30DFF715000
heap
page read and write
30E02367000
heap
page read and write
35B0000
direct allocation
page read and write
30DFAC7F000
heap
page read and write
30E0220C000
heap
page read and write
30DFF127000
heap
page read and write
30DFACA1000
heap
page read and write
19C000
stack
page read and write
30DFF2BD000
heap
page read and write
30DFF03D000
heap
page read and write
AF0000
heap
page read and write
30DFF359000
heap
page read and write
30E021D3000
heap
page read and write
30DFEFBB000
heap
page read and write
30E021D3000
heap
page read and write
30E02208000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFAC59000
heap
page read and write
30DFF2BF000
heap
page read and write
8C0000
heap
page read and write
23C4000
direct allocation
page read and write
30DFF025000
heap
page read and write
30DFEFA9000
heap
page read and write
30DFF041000
heap
page read and write
30DFAB57000
heap
page read and write
30DFF682000
heap
page read and write
30E0242D000
heap
page read and write
30DFF533000
heap
page read and write
30DFAC13000
heap
page read and write
30E02303000
heap
page read and write
30DFF3C5000
heap
page read and write
30E02210000
heap
page read and write
30E02297000
heap
page read and write
97F000
heap
page read and write
30DFAC45000
heap
page read and write
30DFF4A9000
heap
page read and write
30DFF308000
heap
page read and write
24D1000
direct allocation
page read and write
30DFF2BF000
heap
page read and write
30DFF715000
heap
page read and write
30DFACB8000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFF137000
heap
page read and write
30DFEFEA000
heap
page read and write
30E02213000
heap
page read and write
30E024A0000
heap
page read and write
2445000
direct allocation
page read and write
30DFF0CB000
heap
page read and write
30DFF530000
heap
page read and write
30DFAB16000
heap
page read and write
30E024C6000
direct allocation
page read and write
30DFEFA9000
heap
page read and write
30E02208000
heap
page read and write
30DFF2B9000
heap
page read and write
30DFAC5B000
heap
page read and write
7FF69F833000
unkown
page readonly
30E021D3000
heap
page read and write
35A0000
direct allocation
page read and write
30E021C9000
heap
page read and write
30DFEFF7000
heap
page read and write
30DFF00E000
heap
page read and write
30DFACB8000
heap
page read and write
30DFAC62000
heap
page read and write
30E024DF000
direct allocation
page read and write
30DFEFCE000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFEF50000
heap
page read and write
30DFF0B5000
heap
page read and write
30E0236F000
heap
page read and write
30E02360000
heap
page read and write
30DFF165000
heap
page read and write
30DFAC75000
heap
page read and write
30DFAB1A000
heap
page read and write
30E02213000
heap
page read and write
30DFF0D1000
heap
page read and write
30E01FC0000
trusted library allocation
page read and write
968000
heap
page read and write
30DFF428000
heap
page read and write
30DFCC74000
heap
page read and write
30DFAC13000
heap
page read and write
30E022A6000
heap
page read and write
95F000
heap
page read and write
30DFAC75000
heap
page read and write
30DFCCA3000
heap
page read and write
379E000
stack
page read and write
30DFF1F1000
heap
page read and write
30DFF50E000
heap
page read and write
2CD63F68000
heap
page read and write
30DFF41C000
heap
page read and write
30DFEF9C000
heap
page read and write
30DFCBFA000
heap
page read and write
30DFF308000
heap
page read and write
30DFF4E6000
heap
page read and write
30DFAB16000
heap
page read and write
30DFF55F000
heap
page read and write
30E01F60000
direct allocation
page read and write
30DFF4A9000
heap
page read and write
977000
heap
page read and write
30DFF3B9000
heap
page read and write
30DFF22B000
heap
page read and write
30E0246C000
heap
page read and write
30E02360000
heap
page read and write
913000
heap
page read and write
30DFF4B7000
heap
page read and write
5170000
heap
page read and write
993000
heap
page read and write
30E023A3000
heap
page read and write
30DFF3B0000
heap
page read and write
2374000
direct allocation
page read and write
30E022DB000
heap
page read and write
30E0225A000
heap
page read and write
30DFAC70000
heap
page read and write
30DFABAD000
heap
page read and write
30DFAB7A000
heap
page read and write
30E024F6000
heap
page read and write
30DFF3D2000
heap
page read and write
30DFAB0E000
heap
page read and write
30DFF161000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF3C3000
heap
page read and write
4B7000
unkown
page read and write
30DFAB21000
heap
page read and write
30E02268000
direct allocation
page read and write
30DFF2BF000
heap
page read and write
30DFF3DA000
heap
page read and write
30DFF157000
heap
page read and write
30DFF4E6000
heap
page read and write
30DFAB79000
heap
page read and write
2CD63F7C000
heap
page read and write
5B62000
direct allocation
page read and write
30DFF308000
heap
page read and write
30E021D3000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFAC5B000
heap
page read and write
30DFF462000
heap
page read and write
30DFF3D1000
heap
page read and write
30E021CC000
heap
page read and write
30E02210000
heap
page read and write
935000
heap
page read and write
30DFEFA9000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFF55F000
heap
page read and write
30DFF3CA000
heap
page read and write
30E023A3000
heap
page read and write
30DFF186000
heap
page read and write
30DFCD63000
heap
page read and write
30DFF3D7000
heap
page read and write
7FB50000
direct allocation
page read and write
30DFF22B000
heap
page read and write
30DFCE7E000
heap
page read and write
8FB000
heap
page read and write
30DFF718000
heap
page read and write
30E02429000
heap
page read and write
237B000
direct allocation
page read and write
30DFF041000
heap
page read and write
90C000
heap
page read and write
38DA000
direct allocation
page read and write
30DFF55F000
heap
page read and write
9B000
stack
page read and write
30E021D3000
heap
page read and write
2690000
direct allocation
page read and write
2448000
direct allocation
page read and write
30DFF536000
heap
page read and write
30DFF50E000
heap
page read and write
30DFAB77000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFF308000
heap
page read and write
30DFAC52000
heap
page read and write
7FF69F811000
unkown
page execute read
30E01FA0000
trusted library allocation
page read and write
30DFF51D000
heap
page read and write
30DFCB73000
heap
page read and write
30DFF10B000
heap
page read and write
30DFAC58000
heap
page read and write
30E02090000
trusted library allocation
page read and write
91F000
heap
page read and write
30E0229F000
heap
page read and write
30E02208000
heap
page read and write
30DFCE44000
heap
page read and write
30E021CC000
heap
page read and write
2CD63F63000
heap
page read and write
30E0257E000
heap
page read and write
30DFF1F1000
heap
page read and write
30DFAC80000
heap
page read and write
6C7000
unkown
page read and write
30DFAB57000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF0C7000
heap
page read and write
30DFF2CD000
heap
page read and write
30DFF359000
heap
page read and write
30DFF718000
heap
page read and write
30E022DB000
heap
page read and write
30DFF041000
heap
page read and write
30DFCD93000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF465000
heap
page read and write
30E0236F000
heap
page read and write
30DFF1F5000
heap
page read and write
30E02141000
heap
page read and write
30E021D3000
heap
page read and write
30E0242D000
heap
page read and write
2CD63F7C000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF3D2000
heap
page read and write
30E02535000
heap
page read and write
966000
heap
page read and write
30DFF4F1000
heap
page read and write
30DFF571000
heap
page read and write
30DFAB1A000
heap
page read and write
30DFCF0A000
heap
page read and write
30DFF2C0000
heap
page read and write
30DFAC13000
heap
page read and write
30DFF3BD000
heap
page read and write
30E02000000
trusted library allocation
page read and write
30DFACA1000
heap
page read and write
30DFF4E6000
heap
page read and write
30DFF71A000
heap
page read and write
30DFF71A000
heap
page read and write
30DFF572000
heap
page read and write
55E000
stack
page read and write
3A10000
heap
page read and write
30DFF134000
heap
page read and write
30E024F6000
heap
page read and write
30DFAC59000
heap
page read and write
30DFF4A8000
heap
page read and write
3A91000
heap
page read and write
30DFF3D2000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFACB8000
heap
page read and write
30DFAC57000
heap
page read and write
30DFAB6C000
heap
page read and write
3C8F000
stack
page read and write
30DFF12C000
heap
page read and write
30DFF3D7000
heap
page read and write
30DFF360000
heap
page read and write
3A12000
heap
page read and write
30DFAB12000
heap
page read and write
30DFF11A000
heap
page read and write
30E02140000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFACB8000
heap
page read and write
30DFF186000
heap
page read and write
30E01FC0000
trusted library allocation
page read and write
30DFF02B000
heap
page read and write
30E02600000
heap
page read and write
30DFF2BF000
heap
page read and write
30DFAC42000
heap
page read and write
30DFF4F1000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF560000
heap
page read and write
30DFF1B0000
heap
page read and write
23F8000
direct allocation
page read and write
30DFF403000
heap
page read and write
3DCF000
stack
page read and write
2430000
direct allocation
page read and write
30E021CC000
heap
page read and write
30DFCFA2000
heap
page read and write
30E0236F000
heap
page read and write
30DFF368000
heap
page read and write
30E024F1000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFF55A000
heap
page read and write
30E02297000
heap
page read and write
30DFF5AD000
heap
page read and write
3CCE000
stack
page read and write
30DFF4DE000
heap
page read and write
30DFF0C7000
heap
page read and write
23F8000
direct allocation
page read and write
30E022DB000
heap
page read and write
30E01FE0000
trusted library allocation
page read and write
30DFF530000
heap
page read and write
243A000
direct allocation
page read and write
30E024F9000
heap
page read and write
30DFCFAA000
heap
page read and write
244D000
direct allocation
page read and write
5B6D000
direct allocation
page read and write
30E02536000
heap
page read and write
30DFAC13000
heap
page read and write
30DFCCA1000
heap
page read and write
A9F000
stack
page read and write
30E0229C000
heap
page read and write
30DFEFA6000
heap
page read and write
30DFF3B5000
heap
page read and write
30E021D3000
heap
page read and write
30DFF571000
heap
page read and write
30DFCD93000
heap
page read and write
30DFF22B000
heap
page read and write
3A12000
heap
page read and write
30DFF308000
heap
page read and write
3A44000
heap
page read and write
30DFF1A7000
heap
page read and write
30E0229C000
heap
page read and write
30DFEFA9000
heap
page read and write
30DFEFF0000
heap
page read and write
239F000
direct allocation
page read and write
30DFF22B000
heap
page read and write
30DFF00E000
heap
page read and write
30DFAB8D000
heap
page read and write
2407000
direct allocation
page read and write
30DFCE7E000
heap
page read and write
2CD63F89000
heap
page read and write
30DFF4E6000
heap
page read and write
30DFCED6000
heap
page read and write
30DFEA40000
trusted library allocation
page read and write
30DFCFA4000
heap
page read and write
18C000
stack
page read and write
30DFEFB2000
heap
page read and write
30DFAC59000
heap
page read and write
30E022A6000
heap
page read and write
30E02141000
heap
page read and write
30DFEFEA000
heap
page read and write
30DFF0D5000
heap
page read and write
30E0246C000
heap
page read and write
30E02367000
heap
page read and write
30DFD05C000
heap
page read and write
30E0225A000
heap
page read and write
30E02141000
heap
page read and write
30DFF6F3000
heap
page read and write
30DFF0B5000
heap
page read and write
30E0236F000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFCFAA000
heap
page read and write
30E02437000
heap
page read and write
30E022D0000
heap
page read and write
30DFF0CB000
heap
page read and write
30E02360000
heap
page read and write
30DFCB54000
heap
page read and write
30E021C9000
heap
page read and write
30DFCB59000
heap
page read and write
30E02213000
heap
page read and write
30DFAC59000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF568000
heap
page read and write
30DFF35D000
heap
page read and write
30E02260000
direct allocation
page read and write
8C8000
heap
page read and write
30DFF40A000
heap
page read and write
30DFF52E000
heap
page read and write
945000
heap
page read and write
30E02297000
heap
page read and write
926000
heap
page read and write
30DFF0C7000
heap
page read and write
30DFF39C000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF3BD000
heap
page read and write
30DFAC8E000
heap
page read and write
30DFCE53000
heap
page read and write
5170000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFF2C1000
heap
page read and write
30E0229F000
heap
page read and write
2DA0000
trusted library allocation
page read and write
30DFAB57000
heap
page read and write
30E025C0000
heap
page read and write
2CD63F8B000
heap
page read and write
5170000
heap
page read and write
30DFF53D000
heap
page read and write
30E02322000
heap
page read and write
30DFF1EF000
heap
page read and write
30DFEFEA000
heap
page read and write
C47000
heap
page read and write
30E021CC000
heap
page read and write
30DFF00E000
heap
page read and write
30DFF041000
heap
page read and write
30DFEFF0000
heap
page read and write
30DFF3F0000
heap
page read and write
30E02684000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFF2D5000
heap
page read and write
30DFAC13000
heap
page read and write
30E0242D000
heap
page read and write
30DFF157000
heap
page read and write
30DFF552000
heap
page read and write
30DFF35D000
heap
page read and write
30E022A6000
heap
page read and write
30DFF71A000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFF6C3000
heap
page read and write
38E2000
direct allocation
page read and write
30DFF2BA000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF12D000
heap
page read and write
30DFF12B000
heap
page read and write
30E0225A000
heap
page read and write
30DFCEF9000
heap
page read and write
30E0246C000
heap
page read and write
23BD000
direct allocation
page read and write
30DFF2BA000
heap
page read and write
30E02141000
heap
page read and write
30DFCFA2000
heap
page read and write
30E020B1000
heap
page read and write
30DFEFB2000
heap
page read and write
30DFEFA1000
heap
page read and write
30DFF750000
trusted library allocation
page read and write
30DFF4E6000
heap
page read and write
30E02297000
heap
page read and write
30E022DB000
heap
page read and write
30DFEFBB000
heap
page read and write
30DFCFAE000
heap
page read and write
30DFEFCE000
heap
page read and write
30E0236F000
heap
page read and write
966000
heap
page read and write
30DFCE7E000
heap
page read and write
30DFF308000
heap
page read and write
8FE000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFF560000
heap
page read and write
30DFCB56000
heap
page read and write
30E02208000
heap
page read and write
30E0229F000
heap
page read and write
30DFAC52000
heap
page read and write
30E024D3000
direct allocation
page read and write
30DFF3A6000
heap
page read and write
30DFAC45000
heap
page read and write
30E0229F000
heap
page read and write
30DFCFA4000
heap
page read and write
30DFF1B0000
heap
page read and write
30DFEF99000
heap
page read and write
30E02213000
heap
page read and write
30DFF165000
heap
page read and write
30DFAC65000
heap
page read and write
30DFF4EE000
heap
page read and write
30E02208000
heap
page read and write
30DFF368000
heap
page read and write
30DFF718000
heap
page read and write
30DFF013000
heap
page read and write
30DFF3E1000
heap
page read and write
30DFF46A000
heap
page read and write
241D000
direct allocation
page read and write
30E02500000
heap
page read and write
30E02141000
heap
page read and write
30E02213000
heap
page read and write
30DFF007000
heap
page read and write
5170000
heap
page read and write
30DFAC1C000
heap
page read and write
30E022B0000
heap
page read and write
30DFF46A000
heap
page read and write
35E8000
direct allocation
page read and write
30DFAB77000
heap
page read and write
30DFF3E2000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFEFCE000
heap
page read and write
235E000
direct allocation
page read and write
30DFF3D8000
heap
page read and write
93000
stack
page read and write
30E0229C000
heap
page read and write
5765000
direct allocation
page read and write
30DFAB57000
heap
page read and write
30DFF715000
heap
page read and write
30DFCFAA000
heap
page read and write
30DFF02B000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFF3D2000
heap
page read and write
30E02322000
heap
page read and write
30E0229C000
heap
page read and write
30DFF161000
heap
page read and write
30DFAC75000
heap
page read and write
2CD63F78000
heap
page read and write
6A8000
heap
page read and write
3A10000
heap
page read and write
23E2000
direct allocation
page read and write
2504000
direct allocation
page read and write
30E024B0000
direct allocation
page read and write
30DFF22B000
heap
page read and write
38CE000
direct allocation
page read and write
30DFCE34000
heap
page read and write
30DFF31B000
heap
page read and write
30DFAC52000
heap
page read and write
7F0000
heap
page read and write
30DFF714000
heap
page read and write
30DFF3C3000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFCD87000
heap
page read and write
30E02210000
heap
page read and write
30DFF10E000
heap
page read and write
ABF000
stack
page read and write
30E02263000
direct allocation
page read and write
30E02141000
heap
page read and write
918000
heap
page read and write
30E021CC000
heap
page read and write
248C000
direct allocation
page read and write
30DFCBAC000
heap
page read and write
30E022C7000
heap
page read and write
30DFF571000
heap
page read and write
30DFF1B0000
heap
page read and write
30DFF71A000
heap
page read and write
236C000
direct allocation
page read and write
30E02003000
trusted library allocation
page read and write
30DFF1F5000
heap
page read and write
30E02322000
heap
page read and write
3A48000
heap
page read and write
23AD000
direct allocation
page read and write
30E023EB000
heap
page read and write
30E024B4000
heap
page read and write
30DFF702000
heap
page read and write
30DFF360000
heap
page read and write
30DFEFB2000
heap
page read and write
30DFF041000
heap
page read and write
30DFF127000
heap
page read and write
30E01F70000
trusted library allocation
page read and write
30DFF329000
heap
page read and write
30DFF571000
heap
page read and write
30E01FE0000
trusted library allocation
page read and write
30DFAC13000
heap
page read and write
2840000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF4D9000
heap
page read and write
30E02537000
heap
page read and write
30DFEFA9000
heap
page read and write
23FA000
direct allocation
page read and write
30DFAB8D000
heap
page read and write
4B7000
unkown
page write copy
30E0225A000
heap
page read and write
30DFAB8D000
heap
page read and write
30E02360000
heap
page read and write
30DFAB72000
heap
page read and write
30E02187000
heap
page read and write
30DFF16E000
heap
page read and write
30DFF1EF000
heap
page read and write
30DFF3C6000
heap
page read and write
30E024F6000
heap
page read and write
992000
heap
page read and write
30DFF028000
heap
page read and write
30DFF137000
heap
page read and write
30E022A6000
heap
page read and write
30DFEFF7000
heap
page read and write
30DFF51E000
heap
page read and write
30E01F60000
trusted library allocation
page read and write
30E023A3000
heap
page read and write
30DFF3F1000
heap
page read and write
96F000
heap
page read and write
30DFF4E6000
heap
page read and write
30E02210000
heap
page read and write
30DFAC52000
heap
page read and write
30E0220C000
heap
page read and write
30DFF16E000
heap
page read and write
30DFEF9C000
heap
page read and write
30DFCDC4000
heap
page read and write
30DFF368000
heap
page read and write
30DFF568000
heap
page read and write
7FF69F827000
unkown
page readonly
30DFF00E000
heap
page read and write
30E0220C000
heap
page read and write
30E025BF000
heap
page read and write
30DFF715000
heap
page read and write
91B000
heap
page read and write
30DFF308000
heap
page read and write
30DFF3B0000
heap
page read and write
2CD63F92000
heap
page read and write
30DFF4E1000
heap
page read and write
30E02141000
heap
page read and write
30DFF55F000
heap
page read and write
30E01FD0000
trusted library allocation
page read and write
30DFEF97000
heap
page read and write
30E0220C000
heap
page read and write
902000
heap
page read and write
30DFF718000
heap
page read and write
30E0229C000
heap
page read and write
30DFAC52000
heap
page read and write
30DFAB8D000
heap
page read and write
30E0225A000
heap
page read and write
30DFF161000
heap
page read and write
30E022DC000
heap
page read and write
30E025BB000
heap
page read and write
30E02297000
heap
page read and write
30DFF4AD000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF14D000
heap
page read and write
30DFF3CA000
heap
page read and write
30E025BA000
heap
page read and write
30DFAB72000
heap
page read and write
35A0000
direct allocation
page read and write
30DFF030000
heap
page read and write
30DFAB16000
heap
page read and write
30DFCDA4000
heap
page read and write
30DFCE7E000
heap
page read and write
30DFF552000
heap
page read and write
250C000
direct allocation
page read and write
30E02187000
heap
page read and write
30DFEFA7000
heap
page read and write
30DFF025000
heap
page read and write
30E022DB000
heap
page read and write
30DFF458000
heap
page read and write
30E022DD000
heap
page read and write
30E0229C000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFACB8000
heap
page read and write
30E02208000
heap
page read and write
30DFF46C000
heap
page read and write
30DFF1BA000
heap
page read and write
30DFF308000
heap
page read and write
30E0229C000
heap
page read and write
30E024E7000
direct allocation
page read and write
30E02367000
heap
page read and write
30DFF02B000
heap
page read and write
30E024F9000
heap
page read and write
30DFF465000
heap
page read and write
30DFF1F5000
heap
page read and write
30E02367000
heap
page read and write
30E023A5000
heap
page read and write
30DFF0D5000
heap
page read and write
30E0246C000
heap
page read and write
30DFF3D1000
heap
page read and write
30DFCEA4000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF474000
heap
page read and write
30DFF22B000
heap
page read and write
30E0225A000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFAB7A000
heap
page read and write
30E023A5000
heap
page read and write
30DFF16E000
heap
page read and write
910000
heap
page read and write
30DFF53D000
heap
page read and write
30E0236F000
heap
page read and write
30DFF715000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF4D9000
heap
page read and write
8DB000
heap
page read and write
30E02297000
heap
page read and write
249D000
direct allocation
page read and write
30DFF4DE000
heap
page read and write
30DFF0D1000
heap
page read and write
30E021B0000
direct allocation
page read and write
2CD63F74000
heap
page read and write
30DFF041000
heap
page read and write
30DFF715000
heap
page read and write
30E024F1000
heap
page read and write
30DFACB8000
heap
page read and write
30DFACA1000
heap
page read and write
30DFEF21000
heap
page read and write
30E0229F000
heap
page read and write
30E0220C000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF2BA000
heap
page read and write
966000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFF329000
heap
page read and write
30E02213000
heap
page read and write
30DFF127000
heap
page read and write
30DFF3D2000
heap
page read and write
30DFEFBB000
heap
page read and write
30E0246A000
direct allocation
page read and write
30DFF007000
heap
page read and write
30DFAC75000
heap
page read and write
35CC000
direct allocation
page read and write
30E0220C000
heap
page read and write
30DFAC45000
heap
page read and write
C33000
heap
page read and write
2CD63F71000
heap
page read and write
5DEA000
direct allocation
page read and write
30E02139000
heap
page read and write
30E01F93000
trusted library allocation
page read and write
30DFF02B000
heap
page read and write
3A45000
heap
page read and write
30DFEA40000
trusted library allocation
page read and write
30DFCB63000
heap
page read and write
30DFF51D000
heap
page read and write
30DFF31B000
heap
page read and write
2CD63F64000
heap
page read and write
30DFAC75000
heap
page read and write
30E0225A000
heap
page read and write
38A4000
direct allocation
page read and write
30E022A6000
heap
page read and write
30DFF368000
heap
page read and write
30E022DB000
heap
page read and write
30E02213000
heap
page read and write
30DFF71A000
heap
page read and write
30E02437000
heap
page read and write
3A41000
heap
page read and write
3A47000
heap
page read and write
30DFF715000
heap
page read and write
30DFF46A000
heap
page read and write
30DFEFF0000
heap
page read and write
30E0225A000
heap
page read and write
30E01F90000
trusted library allocation
page read and write
30DFF308000
heap
page read and write
30DFF12D000
heap
page read and write
3990000
heap
page read and write
30DFF127000
heap
page read and write
30DFF021000
heap
page read and write
30E024F1000
heap
page read and write
24FD000
direct allocation
page read and write
30E0229F000
heap
page read and write
903000
heap
page read and write
30DFAB57000
heap
page read and write
35B0000
direct allocation
page read and write
30DFCFA2000
heap
page read and write
30DFF1A7000
heap
page read and write
30DFF51D000
heap
page read and write
30DFEFCE000
heap
page read and write
30DFEFF7000
heap
page read and write
30E02297000
heap
page read and write
30DFF0B5000
heap
page read and write
30DFF71A000
heap
page read and write
30DFF1F5000
heap
page read and write
30E021C9000
heap
page read and write
30DFF673000
heap
page read and write
30E022A6000
heap
page read and write
30DFAB9E000
heap
page read and write
917000
heap
page read and write
30E01FE3000
trusted library allocation
page read and write
30DFF007000
heap
page read and write
30DFF00E000
heap
page read and write
30E02210000
heap
page read and write
30E022A6000
heap
page read and write
30DFCC19000
heap
page read and write
30E02429000
heap
page read and write
30DFF4F5000
heap
page read and write
30E021D3000
heap
page read and write
30E02214000
heap
page read and write
30DFF157000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFF013000
heap
page read and write
30E02360000
heap
page read and write
30DFCC43000
heap
page read and write
30E025C0000
heap
page read and write
30E02210000
heap
page read and write
30E021B0000
direct allocation
page read and write
30E022DB000
heap
page read and write
30DFF360000
heap
page read and write
30DFAB16000
heap
page read and write
30DFAC52000
heap
page read and write
30DFEA43000
trusted library allocation
page read and write
30E025FF000
heap
page read and write
30DFF71A000
heap
page read and write
30E023A3000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFAC45000
heap
page read and write
30DFAC45000
heap
page read and write
7FF69F831000
unkown
page write copy
30DFCEE4000
heap
page read and write
30DFF161000
heap
page read and write
30DFF46C000
heap
page read and write
2480000
direct allocation
page read and write
30E02535000
heap
page read and write
30DFF5AD000
heap
page read and write
30E02360000
heap
page read and write
30DFF39C000
heap
page read and write
915000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF535000
heap
page read and write
30DFF0B5000
heap
page read and write
6DE000
unkown
page readonly
30DFCF0E000
heap
page read and write
30E022A6000
heap
page read and write
30DFF368000
heap
page read and write
30E023A3000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF4E1000
heap
page read and write
2424000
direct allocation
page read and write
30E02208000
heap
page read and write
30DFACA1000
heap
page read and write
30E02208000
heap
page read and write
30DFF00E000
heap
page read and write
30DFF50F000
heap
page read and write
30E02646000
heap
page read and write
30E02050000
trusted library allocation
page read and write
240F000
direct allocation
page read and write
30DFF3A6000
heap
page read and write
30DFF3D7000
heap
page read and write
30DFEFA5000
heap
page read and write
30DFF560000
heap
page read and write
30DFF35D000
heap
page read and write
30E02430000
heap
page read and write
984000
heap
page read and write
30DFCFA8000
heap
page read and write
30DFAAE2000
heap
page read and write
30DFF1D8000
heap
page read and write
30E021C9000
heap
page read and write
30E022A6000
heap
page read and write
2521000
direct allocation
page read and write
30E01FA0000
trusted library allocation
page read and write
927000
heap
page read and write
30DFF474000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF535000
heap
page read and write
24A4000
direct allocation
page read and write
30DFAC75000
heap
page read and write
2390000
direct allocation
page read and write
30DFAC8E000
heap
page read and write
30E02260000
direct allocation
page read and write
30DFCFA4000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFCEE3000
heap
page read and write
30DFF55A000
heap
page read and write
30E023EB000
heap
page read and write
2CD63F80000
heap
page read and write
30DFEFA1000
heap
page read and write
30DFF22B000
heap
page read and write
30E024D6000
direct allocation
page read and write
30DFF560000
heap
page read and write
30DFAC8E000
heap
page read and write
30E02500000
heap
page read and write
30DFAC45000
heap
page read and write
30DFF3DA000
heap
page read and write
24EF000
direct allocation
page read and write
30E02210000
heap
page read and write
30E024B4000
heap
page read and write
28A0000
direct allocation
page execute and read and write
277A000
direct allocation
page read and write
2421000
direct allocation
page read and write
30DFF51D000
heap
page read and write
30DFEFB2000
heap
page read and write
24D8000
direct allocation
page read and write
30DFF55F000
heap
page read and write
30E0229F000
heap
page read and write
30DFF39C000
heap
page read and write
30DFAC45000
heap
page read and write
30DFF22B000
heap
page read and write
30E02187000
heap
page read and write
30E02208000
heap
page read and write
30E02187000
heap
page read and write
30E02213000
heap
page read and write
30DFF535000
heap
page read and write
30DFF4A1000
heap
page read and write
30DFEFA6000
heap
page read and write
30E0220C000
heap
page read and write
30DFCE13000
heap
page read and write
30DFF39C000
heap
page read and write
30E02297000
heap
page read and write
30E02208000
heap
page read and write
30DFF3C2000
heap
page read and write
30E025FD000
heap
page read and write
30DFF0CD000
heap
page read and write
985000
heap
page read and write
30E0229F000
heap
page read and write
30DFF4A8000
heap
page read and write
30DFAC62000
heap
page read and write
30E02141000
heap
page read and write
30DFAC59000
heap
page read and write
30E023A3000
heap
page read and write
30DFF718000
heap
page read and write
30DFF359000
heap
page read and write
30DFEFBB000
heap
page read and write
30DFF4A4000
heap
page read and write
30DFF3CA000
heap
page read and write
30E02141000
heap
page read and write
30DFF129000
heap
page read and write
91F000
heap
page read and write
27A0000
heap
page read and write
2413000
direct allocation
page read and write
30DFF2CC000
heap
page read and write
30DFF3D8000
heap
page read and write
30E02537000
heap
page read and write
30DFEFB2000
heap
page read and write
30E023A3000
heap
page read and write
30DFAC80000
heap
page read and write
30DFF041000
heap
page read and write
30DFEFF7000
heap
page read and write
30E0229C000
heap
page read and write
30DFAB18000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFF653000
heap
page read and write
30E022DC000
heap
page read and write
30E02364000
heap
page read and write
30E0220C000
heap
page read and write
30DFF1F5000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF0CD000
heap
page read and write
30E024F1000
heap
page read and write
2CD63F79000
heap
page read and write
30E026C7000
heap
page read and write
30DFABBE000
heap
page read and write
30E02208000
heap
page read and write
30DFF53D000
heap
page read and write
917000
heap
page read and write
5DE1000
direct allocation
page read and write
30DFF2CD000
heap
page read and write
30DFCF0A000
heap
page read and write
30DFF021000
heap
page read and write
55F0000
direct allocation
page read and write
30E0229F000
heap
page read and write
5B64000
direct allocation
page read and write
30DFACB8000
heap
page read and write
30E0229C000
heap
page read and write
30DFF3E1000
heap
page read and write
30DFCD63000
heap
page read and write
30DFF3D8000
heap
page read and write
30DFF2C1000
heap
page read and write
24C2000
direct allocation
page read and write
30DFCF0E000
heap
page read and write
30DFF39C000
heap
page read and write
30DFF46A000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF029000
heap
page read and write
30DFEAE0000
trusted library allocation
page read and write
30DFF2CA000
heap
page read and write
2CD63F87000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFF02B000
heap
page read and write
30E02467000
direct allocation
page read and write
30DFAAEA000
heap
page read and write
30E0229F000
heap
page read and write
30E02210000
heap
page read and write
30DFF021000
heap
page read and write
30DFF6D2000
heap
page read and write
30DFEFCE000
heap
page read and write
30DFAC13000
heap
page read and write
30E0225A000
heap
page read and write
30DFF465000
heap
page read and write
30E02271000
direct allocation
page read and write
23B6000
direct allocation
page read and write
23F0000
direct allocation
page read and write
30E02208000
heap
page read and write
30DFCBAA000
heap
page read and write
30E02213000
heap
page read and write
30DFF55F000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF4E1000
heap
page read and write
30E025BB000
heap
page read and write
30E01FE0000
trusted library allocation
page read and write
30DFF3A6000
heap
page read and write
30DFCEF3000
heap
page read and write
30DFF513000
heap
page read and write
30DFF042000
heap
page read and write
30E0236F000
heap
page read and write
30DFF22B000
heap
page read and write
30E01F73000
trusted library allocation
page read and write
30DFAC52000
heap
page read and write
30DFF534000
heap
page read and write
30DFAB1A000
heap
page read and write
30DFAB16000
heap
page read and write
30DFAC13000
heap
page read and write
576D000
direct allocation
page read and write
30E0236F000
heap
page read and write
30DFF127000
heap
page read and write
30E02259000
heap
page read and write
912000
heap
page read and write
6E0000
unkown
page readonly
30DFF52E000
heap
page read and write
2357000
direct allocation
page read and write
30E02050000
trusted library allocation
page read and write
30E02429000
heap
page read and write
30DFEF9F000
heap
page read and write
30E025FF000
heap
page read and write
30DFF3BD000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF007000
heap
page read and write
30DFF308000
heap
page read and write
30E022A6000
heap
page read and write
2CD63F82000
heap
page read and write
30E023A5000
heap
page read and write
30DFF2BF000
heap
page read and write
30E02210000
heap
page read and write
30E022DB000
heap
page read and write
30DFF55F000
heap
page read and write
3A10000
heap
page read and write
30DFAC9F000
heap
page read and write
30DFAC75000
heap
page read and write
241A000
direct allocation
page read and write
30E02253000
direct allocation
page read and write
30DFF22B000
heap
page read and write
30E021D3000
heap
page read and write
30DFF4E1000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFEAD0000
trusted library allocation
page read and write
2350000
direct allocation
page read and write
30DFF3A3000
heap
page read and write
30E02213000
heap
page read and write
30DFF550000
heap
page read and write
30DFF1F5000
heap
page read and write
30DFF46C000
heap
page read and write
30E023A3000
heap
page read and write
30DFF308000
heap
page read and write
30DFEFF7000
heap
page read and write
30DFF55F000
heap
page read and write
35D6000
direct allocation
page read and write
30DFF623000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF1F6000
heap
page read and write
30DFF497000
heap
page read and write
30DFF22B000
heap
page read and write
30DFAC52000
heap
page read and write
3A10000
heap
page read and write
30DFF3F0000
heap
page read and write
30DFEFA7000
heap
page read and write
30E0225A000
heap
page read and write
30E0220C000
heap
page read and write
30DFF1F5000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF71A000
heap
page read and write
30DFCE64000
heap
page read and write
30DFF52D000
heap
page read and write
30DFCF0E000
heap
page read and write
30E025CA000
heap
page read and write
30DFEFA6000
heap
page read and write
2382000
direct allocation
page read and write
30E01FA0000
trusted library allocation
page read and write
30E02297000
heap
page read and write
30DFF2BF000
heap
page read and write
30DFF31B000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFF4A9000
heap
page read and write
30DFF4DE000
heap
page read and write
30E0229C000
heap
page read and write
30DFF0CD000
heap
page read and write
30E021CC000
heap
page read and write
30E022DB000
heap
page read and write
30DFF53A000
heap
page read and write
30DFF17C000
heap
page read and write
30DFF127000
heap
page read and write
30DFAC64000
heap
page read and write
30E023A3000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF3A6000
heap
page read and write
30E022DB000
heap
page read and write
6C7000
unkown
page write copy
30DFAC80000
heap
page read and write
30DFF360000
heap
page read and write
2441000
direct allocation
page read and write
30DFAC75000
heap
page read and write
30E0229F000
heap
page read and write
30DFF1AB000
heap
page read and write
30DFF530000
heap
page read and write
30DFAB88000
heap
page read and write
30E0225A000
heap
page read and write
30DFAC52000
heap
page read and write
30DFF715000
heap
page read and write
30DFF513000
heap
page read and write
966000
heap
page read and write
992000
heap
page read and write
2408000
direct allocation
page read and write
4C4000
unkown
page readonly
30E0220C000
heap
page read and write
30DFF428000
heap
page read and write
30E02365000
heap
page read and write
30DFCD93000
heap
page read and write
30DFAC52000
heap
page read and write
30DFF572000
heap
page read and write
30DFAB57000
heap
page read and write
30E022DA000
heap
page read and write
30DFF4E1000
heap
page read and write
30DFF2BA000
heap
page read and write
30E022DB000
heap
page read and write
30DFF1F5000
heap
page read and write
30DFF1AB000
heap
page read and write
30DFF3D8000
heap
page read and write
89F000
stack
page read and write
30E021C9000
heap
page read and write
30DFF2CD000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFCCF3000
heap
page read and write
30DFF474000
heap
page read and write
30DFF1EF000
heap
page read and write
30DFAB54000
heap
page read and write
30DFAC62000
heap
page read and write
30DFAB57000
heap
page read and write
30E02360000
heap
page read and write
30DFF360000
heap
page read and write
8E0000
heap
page read and write
30E02210000
heap
page read and write
30DFF403000
heap
page read and write
92A000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFF46A000
heap
page read and write
30DFCD93000
heap
page read and write
30DFF4E1000
heap
page read and write
30DFAB98000
heap
page read and write
30DFF560000
heap
page read and write
30DFCFA8000
heap
page read and write
4D0000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF3C3000
heap
page read and write
30E02297000
heap
page read and write
30DFF1F1000
heap
page read and write
30DFACB8000
heap
page read and write
2CD63F78000
heap
page read and write
30DFF46C000
heap
page read and write
30E0229F000
heap
page read and write
30E022A6000
heap
page read and write
23D2000
direct allocation
page read and write
30DFF3CA000
heap
page read and write
30E022D0000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF2BA000
heap
page read and write
248F000
direct allocation
page read and write
30DFAB7A000
heap
page read and write
30DFCFA2000
heap
page read and write
30E02367000
heap
page read and write
30DFAC5B000
heap
page read and write
30E0225A000
heap
page read and write
30E0225A000
heap
page read and write
30DFF168000
heap
page read and write
30E02297000
heap
page read and write
30E02187000
heap
page read and write
51E000
stack
page read and write
30DFAC59000
heap
page read and write
30DFF360000
heap
page read and write
30DFEAC3000
trusted library allocation
page read and write
30E023A4000
heap
page read and write
30DFF3D2000
heap
page read and write
30DFF535000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFEAF0000
trusted library allocation
page read and write
3750000
direct allocation
page read and write
30DFAB21000
heap
page read and write
30DFAB1A000
heap
page read and write
30E01F80000
trusted library allocation
page read and write
38C4000
direct allocation
page read and write
30E02367000
heap
page read and write
30DFF753000
trusted library allocation
page read and write
30DFF368000
heap
page read and write
4C6000
unkown
page readonly
30E02187000
heap
page read and write
30E02210000
heap
page read and write
30DFF007000
heap
page read and write
30E025CA000
heap
page read and write
2496000
direct allocation
page read and write
30DFAC59000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFAC20000
heap
page read and write
30E022A6000
heap
page read and write
30E02208000
heap
page read and write
30DFF474000
heap
page read and write
30E02190000
trusted library allocation
page read and write
30DFEFA5000
heap
page read and write
30DFF0CB000
heap
page read and write
30DFAB98000
heap
page read and write
2454000
direct allocation
page read and write
30E01FA3000
trusted library allocation
page read and write
30DFF2BF000
heap
page read and write
3A12000
heap
page read and write
30E02367000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFCCF3000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFF419000
heap
page read and write
30DFAC75000
heap
page read and write
30E023A4000
heap
page read and write
30DFCC63000
heap
page read and write
30DFF612000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF2CA000
heap
page read and write
30DFF2D5000
heap
page read and write
30DFF55E000
heap
page read and write
30E02322000
heap
page read and write
91F000
heap
page read and write
30DFF1BA000
heap
page read and write
30DFF308000
heap
page read and write
992000
heap
page read and write
30DFAC9F000
heap
page read and write
30E022DB000
heap
page read and write
30E02250000
heap
page read and write
30E01FD0000
trusted library allocation
page read and write
3A42000
heap
page read and write
30DFF3D8000
heap
page read and write
30E0225A000
heap
page read and write
30DFF4F5000
heap
page read and write
30DFCFAA000
heap
page read and write
30E0236F000
heap
page read and write
30DFF4EE000
heap
page read and write
30DFF53B000
heap
page read and write
30DFF4E6000
heap
page read and write
68E000
stack
page read and write
30DFF4A9000
heap
page read and write
30DFF22B000
heap
page read and write
30DFEFF0000
heap
page read and write
30E02187000
heap
page read and write
30E0236F000
heap
page read and write
30E022A6000
heap
page read and write
30DFF308000
heap
page read and write
30DFF013000
heap
page read and write
30DFF39C000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFF3DA000
heap
page read and write
30DFF403000
heap
page read and write
30E024F9000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF474000
heap
page read and write
30DFAAE0000
heap
page read and write
30DFAB79000
heap
page read and write
30DFF3D8000
heap
page read and write
30E02121000
heap
page read and write
30E02187000
heap
page read and write
30E024A9000
heap
page read and write
30E02141000
heap
page read and write
30DFEFB2000
heap
page read and write
30DFF3F0000
heap
page read and write
30DFF1AB000
heap
page read and write
30DFEB00000
trusted library allocation
page read and write
30DFAC17000
heap
page read and write
4C2000
unkown
page write copy
30DFF3E2000
heap
page read and write
30DFABDF000
heap
page read and write
30DFAB1A000
heap
page read and write
30DFF632000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFAC52000
heap
page read and write
30DFF165000
heap
page read and write
2CD63F77000
heap
page read and write
30DFF041000
heap
page read and write
30E0225A000
heap
page read and write
30DFAC58000
heap
page read and write
30E02322000
heap
page read and write
3A3F000
heap
page read and write
30DFF1B3000
heap
page read and write
91F000
heap
page read and write
30DFF718000
heap
page read and write
30E01F90000
trusted library allocation
page read and write
30DFEAC0000
trusted library allocation
page read and write
30DFAC5B000
heap
page read and write
30DFAAC9000
heap
page read and write
6D6000
unkown
page read and write
30DFF3B9000
heap
page read and write
30DFF186000
heap
page read and write
30E022E0000
heap
page read and write
30DFF4D8000
heap
page read and write
30DFEFBB000
heap
page read and write
30DFF3CA000
heap
page read and write
911000
heap
page read and write
30DFF0CD000
heap
page read and write
2CD63FF7000
heap
page read and write
30E0229F000
heap
page read and write
30DFAB6D000
heap
page read and write
30DFF007000
heap
page read and write
30DFF35D000
heap
page read and write
921000
heap
page read and write
30DFEFEA000
heap
page read and write
30E0229C000
heap
page read and write
30DFEFF7000
heap
page read and write
30DFF2BA000
heap
page read and write
30E020E1000
heap
page read and write
982000
heap
page read and write
30E024DC000
direct allocation
page read and write
2416000
direct allocation
page read and write
30DFF31B000
heap
page read and write
243E000
direct allocation
page read and write
880000
heap
page read and write
30E02450000
direct allocation
page read and write
30DFAB57000
heap
page read and write
30DFAC5B000
heap
page read and write
30E025C1000
heap
page read and write
30DFF55F000
heap
page read and write
30DFF3D8000
heap
page read and write
30DFF533000
heap
page read and write
30E02449000
heap
page read and write
30E02437000
heap
page read and write
30DFAB9A000
heap
page read and write
30DFF533000
heap
page read and write
2CD63F82000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFF024000
heap
page read and write
30DFF17C000
heap
page read and write
30DFAB65000
heap
page read and write
93D000
heap
page read and write
30DFCD24000
heap
page read and write
57A6000
direct allocation
page read and write
2CD63F73000
heap
page read and write
30DFAC45000
heap
page read and write
30DFF403000
heap
page read and write
960000
heap
page read and write
8DE000
heap
page read and write
30E02297000
heap
page read and write
30DFAB14000
heap
page read and write
30DFCCF3000
heap
page read and write
30E02297000
heap
page read and write
2479000
direct allocation
page read and write
30E022DA000
heap
page read and write
30DFCCE8000
heap
page read and write
95F000
heap
page read and write
30DFF71A000
heap
page read and write
30DFCDD1000
heap
page read and write
30DFAB57000
heap
page read and write
30DFF642000
heap
page read and write
35B0000
heap
page read and write
30DFF3A3000
heap
page read and write
2CD63F97000
heap
page read and write
30DFCD63000
heap
page read and write
30DFF4B0000
heap
page read and write
30DFF31B000
heap
page read and write
30DFAC45000
heap
page read and write
30DFCCF3000
heap
page read and write
2CD63F79000
heap
page read and write
30DFF3F0000
heap
page read and write
8E5000
heap
page read and write
30DFCEC5000
heap
page read and write
30E0246C000
heap
page read and write
30DFAB57000
heap
page read and write
30DFF718000
heap
page read and write
6D1000
unkown
page read and write
30DFF3E8000
heap
page read and write
30DFCDA2000
heap
page read and write
30DFCE04000
heap
page read and write
30E023A3000
heap
page read and write
7FF69F810000
unkown
page readonly
30DFAC17000
heap
page read and write
30DFAB1A000
heap
page read and write
30DFEFA9000
heap
page read and write
30E0229C000
heap
page read and write
30DFF3B0000
heap
page read and write
30DFABBC000
heap
page read and write
30E0229C000
heap
page read and write
30E022A6000
heap
page read and write
30DFABBC000
heap
page read and write
30E02440000
heap
page read and write
30E02500000
heap
page read and write
30E020D0000
heap
page read and write
30DFEF31000
heap
page read and write
24B4000
direct allocation
page read and write
30DFF4FA000
heap
page read and write
30E02754000
heap
page read and write
30DFF560000
heap
page read and write
30E02297000
heap
page read and write
30DFF013000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF31B000
heap
page read and write
30DFABAA000
heap
page read and write
2CD63F81000
heap
page read and write
30E02213000
heap
page read and write
30DFEB10000
trusted library allocation
page read and write
400000
unkown
page readonly
30DFF560000
heap
page read and write
30E0229C000
heap
page read and write
30DFF1B3000
heap
page read and write
30DFACB8000
heap
page read and write
30DFCFA8000
heap
page read and write
400000
unkown
page readonly
30E022DB000
heap
page read and write
30E021D3000
heap
page read and write
30E02322000
heap
page read and write
30E0229F000
heap
page read and write
30DFAC59000
heap
page read and write
30E0220C000
heap
page read and write
30E025C3000
heap
page read and write
30DFF428000
heap
page read and write
30E02430000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF359000
heap
page read and write
30E022A6000
heap
page read and write
30DFF4D9000
heap
page read and write
6A0000
heap
page read and write
30E021D3000
heap
page read and write
30E022A6000
heap
page read and write
30DFEFA6000
heap
page read and write
30DFCD93000
heap
page read and write
30DFF2BF000
heap
page read and write
560000
heap
page read and write
30DFF718000
heap
page read and write
30DFF718000
heap
page read and write
30E0220C000
heap
page read and write
30DFF53D000
heap
page read and write
30DFF5AD000
heap
page read and write
30E0229C000
heap
page read and write
30DFF46A000
heap
page read and write
30E0229F000
heap
page read and write
30DFF715000
heap
page read and write
30DFF410000
heap
page read and write
30E02364000
heap
page read and write
30E020BF000
heap
page read and write
30DFF2CE000
heap
page read and write
30E0216F000
heap
page read and write
30DFF51D000
heap
page read and write
30DFF3DA000
heap
page read and write
30E0229C000
heap
page read and write
30E01FD0000
trusted library allocation
page read and write
30DFEFBB000
heap
page read and write
30E021A0000
trusted library allocation
page read and write
30E022A6000
heap
page read and write
30DFF3A6000
heap
page read and write
30E02169000
heap
page read and write
30DFF0CD000
heap
page read and write
30DFCB6D000
heap
page read and write
30DFF2BA000
heap
page read and write
99F000
stack
page read and write
30DFF3D8000
heap
page read and write
2300000
heap
page read and write
30DFF013000
heap
page read and write
30DFF3A6000
heap
page read and write
30DFF4D9000
heap
page read and write
30DFAC70000
heap
page read and write
30DFF53A000
heap
page read and write
30E02322000
heap
page read and write
30DFF31B000
heap
page read and write
30DFF40F000
heap
page read and write
30E02360000
heap
page read and write
30DFF52E000
heap
page read and write
30DFF3CA000
heap
page read and write
30E02010000
trusted library allocation
page read and write
30DFF34A000
heap
page read and write
30DFF718000
heap
page read and write
6CE000
unkown
page read and write
2CD63F8C000
heap
page read and write
3A3E000
heap
page read and write
30DFF2BF000
heap
page read and write
87E000
stack
page read and write
30DFAC9C000
heap
page read and write
2437000
direct allocation
page read and write
30DFF715000
heap
page read and write
30DFF715000
heap
page read and write
30DFAC20000
heap
page read and write
30DFF359000
heap
page read and write
30DFF11A000
heap
page read and write
30DFF718000
heap
page read and write
30DFF4A8000
heap
page read and write
30DFF12D000
heap
page read and write
30DFCC33000
heap
page read and write
30DFAB65000
heap
page read and write
30DFF389000
heap
page read and write
30DFF4E1000
heap
page read and write
30DFF4D9000
heap
page read and write
90C000
heap
page read and write
971000
heap
page read and write
30DFAC75000
heap
page read and write
30DFF495000
heap
page read and write
30E0225A000
heap
page read and write
30E02160000
heap
page read and write
2348000
direct allocation
page read and write
30DFF3A6000
heap
page read and write
30DFAC57000
heap
page read and write
30DFCFAE000
heap
page read and write
30DFF534000
heap
page read and write
30DFF1F5000
heap
page read and write
30DFF11A000
heap
page read and write
30DFF5AD000
heap
page read and write
30DFF49F000
heap
page read and write
30DFF46A000
heap
page read and write
2433000
direct allocation
page read and write
30DFCCD3000
heap
page read and write
30E022DB000
heap
page read and write
401000
unkown
page execute read
30E023EB000
heap
page read and write
30E0229F000
heap
page read and write
30DFF3DA000
heap
page read and write
30E02090000
heap
page read and write
30DFCFB3000
heap
page read and write
30DFF4DE000
heap
page read and write
83E000
stack
page read and write
30E0275B000
heap
page read and write
BE0000
heap
page read and write
30E02141000
heap
page read and write
30DFF35D000
heap
page read and write
35C3000
direct allocation
page read and write
30DFAC7F000
heap
page read and write
30E02297000
heap
page read and write
30DFF368000
heap
page read and write
30DFABBE000
heap
page read and write
30E025C3000
heap
page read and write
30DFAC42000
heap
page read and write
30DFF02B000
heap
page read and write
30E024B4000
heap
page read and write
30DFCE7E000
heap
page read and write
30DFF22B000
heap
page read and write
30E02297000
heap
page read and write
30DFF718000
heap
page read and write
30DFF1E8000
heap
page read and write
30DFF3DA000
heap
page read and write
242C000
direct allocation
page read and write
30E02535000
heap
page read and write
30DFF1F1000
heap
page read and write
30DFCF0E000
heap
page read and write
30DFCE84000
heap
page read and write
30DFCFA0000
heap
page read and write
30DFCD54000
heap
page read and write
30DFF593000
heap
page read and write
30E022DB000
heap
page read and write
30DFF55F000
heap
page read and write
30DFF3D8000
heap
page read and write
30E02192000
heap
page read and write
30DFAC13000
heap
page read and write
30E020A7000
heap
page read and write
30DFF041000
heap
page read and write
30DFAC6F000
heap
page read and write
30E021CC000
heap
page read and write
30DFF3A6000
heap
page read and write
30E020B9000
heap
page read and write
30E024B4000
heap
page read and write
30DFF02B000
heap
page read and write
30DFAB16000
heap
page read and write
30DFCFAE000
heap
page read and write
30DFF4EE000
heap
page read and write
30E021CC000
heap
page read and write
30E0220C000
heap
page read and write
30DFAC13000
heap
page read and write
30E021CC000
heap
page read and write
30DFCF0E000
heap
page read and write
30E0268B000
heap
page read and write
30DFF465000
heap
page read and write
30E02464000
direct allocation
page read and write
30DFCDD3000
heap
page read and write
30DFF127000
heap
page read and write
23CB000
direct allocation
page read and write
30DFF308000
heap
page read and write
30DFF573000
heap
page read and write
30DFF0B5000
heap
page read and write
2690000
direct allocation
page read and write
30DFAB8D000
heap
page read and write
30DFF2CC000
heap
page read and write
640000
heap
page read and write
30E022C7000
heap
page read and write
30DFAC13000
heap
page read and write
30E025C9000
heap
page read and write
30E02500000
heap
page read and write
30DFF474000
heap
page read and write
30DFAC13000
heap
page read and write
30DFF4F1000
heap
page read and write
30E02367000
heap
page read and write
30E01FA0000
trusted library allocation
page read and write
30DFF02B000
heap
page read and write
30DFAC45000
heap
page read and write
30DFF0C7000
heap
page read and write
30DFCF0E000
heap
page read and write
30E022DB000
heap
page read and write
30E021D3000
heap
page read and write
30DFF1BA000
heap
page read and write
30E0229C000
heap
page read and write
30DFAB8D000
heap
page read and write
30DFF2CE000
heap
page read and write
6D9000
unkown
page write copy
30DFF571000
heap
page read and write
30DFF40A000
heap
page read and write
24F6000
direct allocation
page read and write
2CD63F76000
heap
page read and write
BF0000
heap
page read and write
30E021D3000
heap
page read and write
30DFF2BD000
heap
page read and write
30E022DB000
heap
page read and write
30DFAC9C000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFAB57000
heap
page read and write
3A41000
heap
page read and write
30DFF40F000
heap
page read and write
30E02360000
heap
page read and write
30DFF308000
heap
page read and write
30DFF22B000
heap
page read and write
30DFF53D000
heap
page read and write
2CD63F89000
heap
page read and write
2CD63F7C000
heap
page read and write
30DFF2BF000
heap
page read and write
30E02213000
heap
page read and write
30DFCDE6000
heap
page read and write
30DFF2BF000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF465000
heap
page read and write
30E0246C000
heap
page read and write
30E021C9000
heap
page read and write
30DFF3CA000
heap
page read and write
30DFF5AD000
heap
page read and write
30E02360000
heap
page read and write
30DFAB16000
heap
page read and write
30E01FD3000
trusted library allocation
page read and write
2389000
direct allocation
page read and write
3A44000
heap
page read and write
30DFAC75000
heap
page read and write
30E02297000
heap
page read and write
30DFF560000
heap
page read and write
30E01F60000
direct allocation
page read and write
30DFF534000
heap
page read and write
2CD63F82000
heap
page read and write
30DFF40A000
heap
page read and write
97E000
heap
page read and write
30DFF71A000
heap
page read and write
30E0225A000
heap
page read and write
30DFF0CF000
heap
page read and write
30DFF12B000
heap
page read and write
30E02187000
heap
page read and write
30DFF718000
heap
page read and write
30DFF718000
heap
page read and write
30DFCEC4000
heap
page read and write
30DFF465000
heap
page read and write
30E021D3000
heap
page read and write
2CD63F6C000
heap
page read and write
30DFF3C2000
heap
page read and write
30DFF186000
heap
page read and write
30DFF36A000
heap
page read and write
30E020B0000
heap
page read and write
30DFF39C000
heap
page read and write
30DFACB8000
heap
page read and write
30DFCB7D000
heap
page read and write
4B9000
unkown
page read and write
30DFCFA4000
heap
page read and write
5620000
direct allocation
page read and write
30DFCD13000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF2BA000
heap
page read and write
30DFF2BF000
heap
page read and write
30DFF12C000
heap
page read and write
30DFF0D1000
heap
page read and write
2CD63F8C000
heap
page read and write
30E022DB000
heap
page read and write
30E0257C000
heap
page read and write
30DFCE9E000
heap
page read and write
30DFF028000
heap
page read and write
30DFF3DA000
heap
page read and write
30E0225A000
heap
page read and write
30DFF4DE000
heap
page read and write
30DFF4A8000
heap
page read and write
30DFAC59000
heap
page read and write
30DFAC52000
heap
page read and write
30DFAB1A000
heap
page read and write
30DFCC43000
heap
page read and write
30E022A6000
heap
page read and write
30DFF0D5000
heap
page read and write
30DFCFA0000
heap
page read and write
30DFAB7A000
heap
page read and write
30DFF3E1000
heap
page read and write
30DFF12D000
heap
page read and write
30DFF35D000
heap
page read and write
30DFF39C000
heap
page read and write
30DFF4FE000
heap
page read and write
30E02322000
heap
page read and write
30DFF4D9000
heap
page read and write
30E022DC000
heap
page read and write
30DFF572000
heap
page read and write
BBF000
stack
page read and write
30DFF4F1000
heap
page read and write
2CD63F82000
heap
page read and write
30E02187000
heap
page read and write
30DFF71A000
heap
page read and write
30DFEF9F000
heap
page read and write
There are 1838 hidden memdumps, click here to show them.