EurekaLog 6.1.04 Application: ------------------------------------------------------- 1.1 Start Date : Thu, 22 Aug 2019 15:47:09 +0300 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 1.4 Parameters : 1.5 Compilation Date: Thu, 22 Aug 2019 12:55:47 +0300 1.6 Up Time : 0 second Exception: -------------------------------------------------------- 2.1 Date : Thu, 22 Aug 2019 15:47:09 +0300 2.2 Address : 004DC3EF 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 2.5 Type : EResNotFound 2.6 Message : Resource BUILD_INFO_CSV not found. 2.7 ID : 11AB 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ----------------------------------------------------------------- 3.5 Privileges: SeLockMemoryPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF SeDelegateSessionUserImpersonatePrivilege - OFF Computer: ------------------------------------------------------------------------------- 5.3 Free Memory : 10157 Mb 5.5 Free Disk : 131.47 Gb 5.7 Processor : Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz 5.8 Display Mode: 1920 x 1200, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GTX 670 (driver 25.21.14.1735 - RAM 2048 MB) Operating System: ----------------------------------------------- 6.1 Type : Microsoft Windows 10.0 (64 bit) 6.2 Build # : 15063 6.3 Update : 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ----------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ----------------------------------------------------------------------------------------- |*Exception Thread: ID=9688; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------| |004DC3EF|SASPlanet.Debug.exe| | | | | |00E10511|SASPlanet.Debug.exe|u_BuildInfo.pas |TBuildInfo |TryLoadInfoFromRes |86[1] | |00E104DC|SASPlanet.Debug.exe|u_BuildInfo.pas |TBuildInfo |TryLoadInfoFromRes |85[0] | |00E10462|SASPlanet.Debug.exe|u_BuildInfo.pas |TBuildInfo |Create |77[12] | |00E10384|SASPlanet.Debug.exe|u_BuildInfo.pas |TBuildInfo |Create |65[0] | |00E97C59|SASPlanet.Debug.exe|u_GlobalState.pas|TGlobalState|Create |474[19]| |00E97B04|SASPlanet.Debug.exe|u_GlobalState.pas|TGlobalState|Create |455[0] | |00FEE1C0|SASPlanet.Debug.exe|SASPlanet.dpr | | |1527[6]| |74518762|KERNEL32.DLL | | |BaseThreadInitThunk| | ----------------------------------------------------------------------------------------- Modules Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|SASPlanet.Debug.exe | | |13884416|2019-08-22 12:55:50|M:\Maps\Bin\SAS.Planet | |64440000|CityHash.dll | | |23552 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |69950000|websocket.dll |Web Socket API |6.2.15063.0 |37376 |2017-03-18 23:58:52|C:\Windows\SYSTEM32 | |69960000|webpmux.dll | | |31232 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |69970000|ieframe.DLL |Internet Browser |11.0.15063.1779|11893248|2019-04-06 08:14:34|C:\Windows\SYSTEM32 | |6A4D0000|webp.dll | | |358400 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |6A530000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.9279 |570520 |2017-03-18 23:56:52|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c | |6A5C0000|libpng16.dll | | |151040 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |6A5F0000|FreeImage.dll |FreeImage library |3.18.0.0 |338944 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |6A650000|shdocvw.dll |Shell Doc Object and Control Library |6.2.15063.608 |223744 |2017-09-27 21:29:58|C:\Windows\SYSTEM32 | |6C0D0000|zlib1.dll |zlib data compression library |1.2.11.0 |69632 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |6D780000|libcrc32.dll | | |33792 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |6DE00000|iertutil.dll |Run time utility for Internet Explorer |11.0.15063.1808|2210624 |2019-05-18 02:46:12|C:\Windows\SYSTEM32 | |6E020000|URLMON.DLL |OLE32 Extensions for Win32 |11.0.15063.1805|1627648 |2019-05-03 10:09:34|C:\Windows\SYSTEM32 | |6E630000|WINSTA.dll |Winstation Library |6.2.15063.0 |254720 |2017-03-18 23:59:00|C:\Windows\SYSTEM32 | |70F00000|jpeg62.dll | | |953727 |2019-06-14 20:33:16|M:\Maps\Bin\SAS.Planet | |714A0000|apphelp.dll |Application Compatibility Client Library |6.2.15063.1689 |584192 |2019-03-06 10:33:56|C:\Windows\SYSTEM32 | |71700000|dwmapi.dll |Microsoft Desktop Window Manager API |6.2.15063.1155 |125856 |2018-06-08 09:00:04|C:\Windows\system32 | |71820000|winspool.drv |Windows Spooler Driver |6.2.15063.1689 |432128 |2019-03-06 10:41:34|C:\Windows\SYSTEM32 | |71ED0000|WKSCLI.DLL |Workstation Service Client DLL |6.2.15063.0 |57920 |2017-03-18 23:58:48|C:\Windows\SYSTEM32 | |72100000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.2.15063.1292 |182936 |2018-08-01 02:41:48|C:\Windows\system32 | |72140000|CRYPTSP.dll |Cryptographic Service Provider API |6.2.15063.1689 |67656 |2019-03-06 11:13:46|C:\Windows\SYSTEM32 | |721E0000|secur32.dll |Security Support Provider Interface |6.2.15063.1112 |23040 |2018-04-26 22:37:44|C:\Windows\SYSTEM32 | |72540000|uxtheme.dll |Microsoft UxTheme Library |6.2.15063.0 |474112 |2017-03-18 23:58:58|C:\Windows\system32 | |72920000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |6.2.15063.0 |305568 |2017-03-18 23:58:46|C:\Windows\SYSTEM32 | |72990000|olepro32.dll |OLEPRO32.DLL |6.2.15063.1805 |89600 |2019-05-03 10:05:10|C:\Windows\SYSTEM32 | |72A50000|bcrypt.dll |Windows Cryptographic Primitives Library |6.2.15063.1155 |93536 |2018-06-08 08:43:32|C:\Windows\SYSTEM32 | |72AE0000|wsock32.dll |Windows Socket 32-Bit DLL |6.2.15063.0 |16384 |2017-03-18 23:58:50|C:\Windows\SYSTEM32 | |72BD0000|wininet.dll |Internet Extensions for Win32 |11.0.15063.1808|4358144 |2019-05-18 02:46:12|C:\Windows\SYSTEM32 | |73220000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.9279 |653976 |2017-03-18 23:56:52|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c | |73360000|NETUTILS.DLL |Net Win32 API Helpers DLL |6.2.15063.0 |37256 |2017-03-18 23:58:50|C:\Windows\SYSTEM32 | |73370000|SHFolder.dll |Shell Folder Service |6.2.15063.0 |9216 |2017-03-18 23:58:58|C:\Windows\SYSTEM32 | |73A60000|WINHTTP.dll |Windows HTTP Services |6.2.15063.1631 |701936 |2019-02-06 06:18:04|C:\Windows\SYSTEM32 | |73B40000|msimg32.dll |GDIEXT Client DLL |6.2.15063.994 |7168 |2018-03-02 09:50:36|C:\Windows\SYSTEM32 | |73B50000|version.dll |Version Checking and File Installation Libraries |6.2.15063.0 |27424 |2017-03-18 23:59:00|C:\Windows\SYSTEM32 | |73B60000|COMCTL32.dll |User Experience Controls Library |6.10.15063.1779|2139448 |2019-04-06 08:32:58|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.1779_none_88766d943e223649| |73DA0000|WINMMBASE.dll |Base Multimedia Extension API DLL |6.2.15063.0 |129736 |2017-03-18 23:58:46|C:\Windows\SYSTEM32 | |73DD0000|netapi32.dll |Net Win32 API DLL |6.2.15063.0 |68776 |2017-03-18 23:58:50|C:\Windows\SYSTEM32 | |73DF0000|winmm.dll |MCI API DLL |6.2.15063.0 |135440 |2017-03-18 23:58:46|C:\Windows\SYSTEM32 | |73E20000|wtsapi32.dll |Windows Remote Desktop Session Host Server SDK APIs|6.2.15063.0 |53272 |2017-03-18 23:59:00|C:\Windows\SYSTEM32 | |73E50000|CRYPTBASE.dll |Base cryptographic API DLL |6.2.15063.0 |31592 |2017-03-18 23:58:46|C:\Windows\System32 | |73E60000|SspiCli.dll |Security Support Provider Interface |6.2.15063.1418 |124648 |2018-10-10 10:56:16|C:\Windows\System32 | |73E80000|USER32.dll |Multi-User Windows USER API Client DLL |6.2.15063.966 |1292872 |2018-03-05 05:56:30|C:\Windows\System32 | |73FC0000|msvcrt.dll |Windows NT CRT DLL |7.0.15063.0 |769608 |2017-03-18 23:58:46|C:\Windows\System32 | |74080000|gdi32full.dll |GDI Client DLL |6.2.15063.1781 |1408432 |2019-04-10 05:41:32|C:\Windows\System32 | |741E0000|ole32.dll |Microsoft OLE for Windows |6.2.15063.1805 |988792 |2019-05-03 10:35:52|C:\Windows\System32 | |74330000|oleaut32.dll |OLEAUT32.DLL |6.2.15063.1781 |608136 |2019-04-10 05:41:32|C:\Windows\System32 | |743D0000|cfgmgr32.dll |Configuration Manager DLL |6.2.15063.0 |226816 |2017-03-18 23:58:50|C:\Windows\System32 | |74410000|bcryptPrimitives.dll|Windows Cryptographic Primitives Library |6.2.15063.1716 |354264 |2019-03-14 09:43:16|C:\Windows\System32 | |74470000|shcore.dll |SHCORE |6.2.15063.1805 |569168 |2019-05-03 10:38:16|C:\Windows\System32 | |74500000|KERNEL32.DLL |Windows NT BASE API Client DLL |6.2.15063.1805 |599696 |2019-05-03 10:40:46|C:\Windows\System32 | |745D0000|SHELL32.dll |Windows Shell Common Dll |6.2.15063.1805 |20377656|2019-05-03 10:35:58|C:\Windows\System32 | |75920000|ucrtbase.dll |Microsoft® C Runtime Library |6.2.15063.1716 |1150680 |2019-03-14 09:49:52|C:\Windows\System32 | |75A40000|comdlg32.dll |Common Dialogs DLL |6.2.15063.994 |953856 |2018-03-02 09:42:50|C:\Windows\System32 | |75B30000|windows.storage.dll |Microsoft WinRT Storage API |6.2.15063.1805 |5828672 |2019-05-03 10:38:52|C:\Windows\System32 | |760C0000|GDI32.dll |GDI Client DLL |6.2.15063.1805 |129088 |2019-05-03 10:38:40|C:\Windows\System32 | |76150000|advapi32.dll |Advanced Windows 32 Base API |6.2.15063.1356 |482344 |2018-08-30 07:40:56|C:\Windows\System32 | |76230000|Psapi.dll |Process Status Helper |6.2.15063.0 |17112 |2017-03-18 23:58:40|C:\Windows\System32 | |76660000|Msctf.dll |MSCTF Server DLL |6.2.15063.1155 |1333136 |2018-06-08 08:59:58|C:\Windows\System32 | |76840000|MSASN1.dll |ASN.1 Runtime APIs |6.2.15063.1689 |49560 |2019-03-06 11:14:08|C:\Windows\System32 | |769F0000|RPCRT4.dll |Remote Procedure Call Runtime |6.2.15063.1689 |787096 |2019-03-06 11:16:18|C:\Windows\System32 | |76AB0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.2.15063.1356 |259216 |2018-08-30 07:38:56|C:\Windows\System32 | |76B90000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |6.2.15063.0 |415864 |2017-03-18 23:58:46|C:\Windows\System32 | |76C00000|crypt32.dll |Crypto API32 |6.2.15063.1058 |1557288 |2018-04-03 07:19:46|C:\Windows\System32 | |76D80000|profapi.dll |User Profile Basic API |6.2.15063.0 |59456 |2017-03-18 23:58:46|C:\Windows\System32 | |76DA0000|kernel.appcore.dll |AppModel API Host |6.2.15063.1155 |47608 |2018-06-08 08:42:22|C:\Windows\System32 | |76E10000|combase.dll |Microsoft COM for Windows |6.2.15063.1805 |2326800 |2019-05-03 10:36:54|C:\Windows\System32 | |77050000|KERNELBASE.dll |Windows NT BASE API Client DLL |6.2.15063.1805 |1840496 |2019-05-03 10:44:40|C:\Windows\System32 | |77220000|powrprof.dll |Power Profile Helper DLL |6.2.15063.0 |276400 |2017-03-18 23:58:50|C:\Windows\System32 | |77270000|win32u.dll |Win32u |6.2.15063.608 |81176 |2017-09-27 21:29:46|C:\Windows\System32 | |77290000|IMM32.DLL |Multi-User Windows IMM32 API Client DLL |6.2.15063.0 |143672 |2017-03-18 23:59:02|C:\Windows\System32 | |772C0000|shlwapi.dll |Shell Light-weight Utility Library |6.2.15063.1058 |277424 |2018-04-03 07:17:54|C:\Windows\System32 | |77310000|msvcp_win.dll |Microsoft® C Runtime Library |6.2.15063.936 |491224 |2018-02-13 01:31:40|C:\Windows\System32 | |77390000|ntdll.dll |NT Layer DLL |6.2.15063.1805 |1618696 |2019-05-03 10:44:26|C:\Windows\SYSTEM32 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: --------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | --------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |8 | | |4 |System | | |0 |Normal |146 | | |348 |GoogleCrashHandler.exe | | |0 |Low |5 | | |356 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |480 |smss.exe | | |0 |Above-Normal|2 | | |524 |nvsphelper64.exe | | |0 |Normal |4 | | |604 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |18 | | |620 |fontdrvhost.exe |Usermode Font Driver Host |10.0.15063.1805|0 |Normal |5 | | |628 |fontdrvhost.exe |Usermode Font Driver Host |10.0.15063.1805|0 |Normal |5 | | |684 |csrss.exe | | |0 |High |11 | | |692 |explorer.exe |Windows Explorer |10.0.15063.1659|0 |Normal |51 | | |784 |wininit.exe | | |0 |High |1 | | |792 |csrss.exe | | |0 |High |14 | | |860 |services.exe | | |0 |Normal |4 | | |868 |lsass.exe | | |0 |Normal |7 | | |952 |winlogon.exe | | |0 |High |5 | | |1032 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |12 | | |1072 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |1084 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |1132 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |1168 |dwm.exe | | |0 |High |10 | | |1196 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |1240 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |1280 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |1292 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |1344 |AdobeIPCBroker.exe | | |0 |Normal |5 | | |1408 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |10 | | |1424 |WUDFHost.exe | | |0 |Normal |5 | | |1496 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |1576 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |1624 |chrome.exe | | |0 |Normal |21 | | |1648 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |14 | | |1668 |chrome.exe | | |0 |Low |14 | | |1676 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |1768 |chrome.exe | | |0 |Normal |16 | | |1792 |USBSRService.exe | | |0 |Normal |3 | | |1824 |NVDisplay.Container.exe | | |0 |Normal |7 | | |1852 |chrome.exe | | |0 |Low |13 | | |1892 |NVDisplay.Container.exe | | |0 |Normal |23 | | |1912 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |7 | | |1956 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |1964 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |1976 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |2044 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |2100 |chrome.exe | | |0 |Normal |13 | | |2148 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |8 | | |2172 |aaHMSvc.exe | | |0 |Normal |4 | | |2240 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |2276 |node.exe |Node.js: Server-side JavaScript |8.9.4.0 |0 |Normal |19 | | |2308 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |2312 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |2372 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |2380 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |9 | | |2388 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |2424 |chrome.exe | | |0 |Low |14 | | |2440 |chrome.exe | | |0 |Low |14 | | |2464 |chrome.exe | | |0 |Low |14 | | |2496 |ShellExperienceHost.exe | | |0 |Normal |25 | | |2520 |FNPLicensingService64.exe | | |0 |Normal |6 | | |2540 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |2712 |spoolsv.exe | | |0 |Normal |9 | | |2784 |GoogleCrashHandler64.exe | | |0 |Low |3 | | |2816 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |2840 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |2868 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |12 | | |2908 |chrome.exe | | |0 |Low |14 | | |2916 |CCXProcess.exe | | |0 |Normal |1 | | |2936 |chrome.exe | | |0 |Normal |2 | | |2976 |armsvc.exe | | |0 |Normal |2 | | |2984 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |10 | | |2992 |AsSysCtrlService.exe | | |0 |Normal |3 | | |3004 |AsusFanControlService.exe | | |0 |Normal |3 | | |3012 |AGSService.exe | | |0 |Normal |3 | | |3024 |atkexComSvc.exe | | |0 |Normal |2 | | |3032 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |13 | | |3040 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |3048 |DbxSvc.exe | | |0 |Normal |24 | | |3064 |MemuService.exe | | |0 |Normal |2 | | |3096 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |3124 |nvcontainer.exe | | |0 |Normal |35 | | |3132 |NvTelemetryContainer.exe | | |0 |Normal |15 | | |3140 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |9 | | |3152 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |3160 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |7 | | |3180 |NVIDIA Web Helper.exe | | |0 |Below-Normal|95 | | |3212 |SecurityHealthService.exe | | |0 |Normal |5 | | |3224 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |8 | | |3244 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |3 | | |3304 |vmware-authd.exe | | |0 |Normal |6 | | |3328 |vmware-usbarbitrator64.exe| | |0 |Normal |3 | | |3352 |vmnat.exe |VMware NAT Service |15.0.2.40550 |0 |Normal |4 | | |3368 |conhost.exe | | |0 |Below-Normal|1 | | |3376 |NVIDIA Share.exe | | |0 |Normal |25 | | |3380 |vmnetdhcp.exe |VMware VMnet DHCP service |15.0.2.40550 |0 |Normal |2 | | |3416 |vmms.exe | | |0 |Normal |12 | | |3432 |SmSrvc.exe | | |0 |Below-Normal|2 | | |3452 |WTSrv.exe | | |0 |High |3 | | |3484 |chrome.exe | | |0 |Low |14 | | |3684 |RuntimeBroker.exe | | |0 |Normal |1 | | |3704 |chrome.exe | | |0 |Normal |14 | | |3732 |chrome.exe | | |0 |Normal |15 | | |3792 |chrome.exe | | |0 |Low |16 | | |3912 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |4160 |chrome.exe | | |0 |Low |14 | | |4220 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |9 | | |4228 |vmcompute.exe | | |0 |Normal |3 | | |4292 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |4668 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |6 | | |4764 |WmiPrvSE.exe |WMI Provider Host |10.0.15063.994 |0 |Normal |6 | | |4776 |chrome.exe | | |0 |Normal |13 | | |4856 |chrome.exe | | |0 |Low |14 | | |5000 |chrome.exe | | |0 |Low |14 | | |5032 |chrome.exe | | |0 |Low |14 | | |5076 |SmartSync.exe | | |0 |Below-Normal|2 | | |5324 |chrome.exe | | |0 |Low |14 | | |5452 |unsecapp.exe | | |0 |Normal |3 | | |5632 |chrome.exe | | |0 |Normal |8 | | |5688 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |4 | | |5696 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |5 | | |5796 |chrome.exe | | |0 |Normal |13 | | |5988 |nvcontainer.exe | | |0 |Normal |13 | | |5996 |nvcontainer.exe | | |0 |Normal |35 | | |6008 |chrome.exe | | |0 |Low |13 | | |6028 |bcsvc.exe | | |0 |Normal |5 | | |6036 |sihost.exe | | |0 |Normal |10 | | |6072 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |7 | | |6096 |chrome.exe | | |0 |Low |19 | | |6140 |taskhostw.exe | | |0 |Normal |18 | | |6196 |NVIDIA Share.exe | | |0 |Normal |13 | | |6368 |NVIDIA Share.exe | | |0 |Normal |17 | | |6552 |chrome.exe | | |0 |Normal |13 | | |6620 |RtkNGUI64.exe | | |0 |Normal |6 | | |6680 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |17 | | |6740 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |7 | | |6748 |USBSafelyRemove.exe | | |0 |Normal |4 | | |6876 |LCore.exe | | |0 |Normal |17 | | |6936 |chrome.exe | | |0 |Low |14 | | |6944 |CintaNotes.exe | | |0 |Normal |8 | | |7004 |chrome.exe | | |0 |Normal |7 | | |7016 |chrome.exe | | |0 |Normal |13 | | |7128 |conhost.exe | | |0 |Normal |3 | | |7132 |DropboxUpdate.exe | | |0 |Normal |3 | | |7244 |chrome.exe | | |0 |Low |13 | | |7308 |svchost.exe |Host Process for Windows Services|10.0.15063.0 |0 |Normal |2 | | |7328 |chrome.exe | | |0 |Low |14 | | |7480 |plugin_host.exe | | |0 |Normal |13 | | |7504 |chrome.exe | | |0 |Normal |13 | | |7740 |chrome.exe | | |0 |Normal |13 | | |7760 |chrome.exe | | |0 |Low |14 | | |7908 |conhost.exe | | |0 |Normal |1 | | |7916 |chrome.exe | | |0 |Low |13 | | |7960 |chrome.exe | | |0 |Low |13 | | |8016 |chrome.exe | | |0 |Low |16 | | |8120 |chrome.exe | | |0 |Low |14 | | |8196 |chrome.exe | | |0 |Low |17 | | |8236 |chrome.exe | | |0 |Low |14 | | |8240 |explorer.exe |Windows Explorer |10.0.15063.1659|0 |Normal |6 | | |8264 |Far32.exe | | |0 |Normal |15 | | |8316 |chrome.exe | | |0 |Low |14 | | |8412 |Far.exe |File and archive manager |3.0.5400.0 |0 |Normal |16 |C:\Portables\Far3 | |8436 |robotaskbaricon.exe | | |0 |Normal |2 | | |8472 |WmiPrvSE.exe |WMI Provider Host |10.0.15063.994 |0 |Normal |11 | | |8480 |chrome.exe | | |0 |Normal |14 | | |8492 |WTClient.exe |Tablet Client Driver |10.30.2009.1 |0 |High |4 | | |8580 |FreeCountdownTimer.exe | | |0 |Normal |8 | | |8660 |jusched.exe | | |0 |Below-Normal|1 | | |8700 |chrome.exe | | |0 |Low |14 | | |8780 |conhost.exe | | |0 |Normal |3 | | |8832 |chrome.exe | | |0 |Low |14 | | |8868 |chrome.exe | | |0 |Normal |13 | | |8984 |audiodg.exe | | |0 |Normal |6 | | |9108 |chrome.exe | | |0 |Low |14 | | |9192 |chrome.exe | | |0 |Normal |14 | | |9324 |chrome.exe | | |0 |Normal |13 | | |9416 |acrotray.exe | | |0 |Normal |2 | | |9540 |vmware-tray.exe | | |0 |Normal |3 | | |9604 |conhost.exe | | |0 |Normal |3 | | |9740 |chrome.exe | | |0 |Normal |13 | | |9800 |chrome.exe | | |0 |Low |14 | | |9848 |chrome.exe | | |0 |Low |14 | | |9904 |chrome.exe | | |0 |Normal |13 | | |9908 |uTorrent.exe | | |0 |Normal |46 | | |9940 |chrome.exe | | |0 |Low |14 | | |9992 |chrome.exe | | |0 |Normal |13 | | |10040|python.exe |Python |3.6.6150.1013 |0 |Normal |3 | | |10092|dllhost.exe |COM Surrogate |10.0.15063.0 |0 |Normal |2 | | |10124|chrome.exe | | |0 |Normal |33 | | |10312|sublime_text.exe | | |0 |Normal |11 | | |10428|cmd.exe |Windows Command Processor |10.0.15063.0 |0 |Normal |1 | | |10468|chrome.exe | | |0 |Low |14 | | |10600|chrome.exe | | |0 |Normal |13 | | |10608|chrome.exe | | |0 |Low |13 | | |10724|SASPlanet.Debug.exe | | |0 |Normal |6 |M:\Maps\Bin\SAS.Planet| |10736|chrome.exe | | |0 |Low |15 | | |11148|chrome.exe | | |0 |Low |14 | | |11224|chrome.exe | | |0 |Normal |13 | | |11260|chrome.exe | | |0 |Low |14 | | --------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ---------------------------------------------------------- 004DC3D4 call -$000C2551 004DC3D9 mov esi, eax 004DC3DB test esi, esi 004DC3DD setnl dl 004DC3E0 mov eax, ebx 004DC3E2 call -$00000A97 004DC3E7 dec esi 004DC3E8 jnz +$04 004DC3EA mov byte ptr [ebx+$0F], $00 004DC3EE pop esi 004DC3EF pop ebx ; <-- EXCEPTION 004DC3F0 ret Registers: ----------------------------- EAX: 03FEFAB0 EDI: 00000000 EBX: 03FEF950 ESI: 00400000 ECX: 0049E400 ESP: 0019FC50 EDX: 004CEBA4 EIP: 004CEB9F Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0019FC50: 0019FC98 04FA1C20: 5B C3 8D 40 00 80 78 2C 00 74 17 8B 0D F8 35 02 [..@..x,.t....5. 0019FC54: 0040BD78 04FA1C30: 01 B2 01 A1 50 A0 4A 00 E8 00 96 F5 FF E8 8B FA ....P.J......... 0019FC58: 0019FC6C 04FA1C40: F2 FF C6 40 0E 01 8B 10 FF 52 04 C3 90 53 56 83 ...@.....R...SV. 0019FC5C: 00000000 04FA1C50: C4 D8 8B F0 80 7E 2C 00 74 17 8B 0D 68 3D 02 01 .....~,.t...h=.. 0019FC60: 03FC26EC 04FA1C60: B2 01 A1 50 A0 4A 00 E8 D1 95 F5 FF E8 5C FA F2 ...P.J.......\.. 0019FC64: 0019FC11 04FA1C70: FF 8B 46 08 89 44 24 04 E8 14 F6 FF FF 8B 40 04 ..F..D$.......@. 0019FC68: 00000000 04FA1C80: 8B 15 E4 47 02 01 3B 02 75 58 33 DB A1 AC B4 02 ...G..;.uX3..... 0019FC6C: 0019FC88 04FA1C90: 01 89 44 24 08 83 FB 02 75 12 6A 00 6A 00 6A 00 ..D$....u.j.j.j. 0019FC70: 004CEBFB 04FA1CA0: 6A 00 8D 44 24 1C 50 E8 05 E7 F3 FF 6A 40 68 E8 j..D$.P.....j@h. 0019FC74: 0019FC88 04FA1CB0: 03 00 00 6A 00 8D 44 24 10 50 6A 02 E8 D0 E6 F3 ...j..D$.Pj..... 0019FC78: 03FEF950 04FA1CC0: FF 8B D8 83 FB FF 0F 95 C2 8B C6 E8 B1 F4 FF FF ................ 0019FC7C: 00400000 04FA1CD0: 83 FB 01 75 07 33 C0 E8 6D EE FF FF 85 DB 75 B5 ...u.3..m.....u. 0019FC80: 00000001 04FA1CE0: EB 0C 6A FF 8B 44 24 08 50 E8 13 DB F3 FF 54 8B ..j..D$.P.....T. 0019FC84: 00E106E8 04FA1CF0: 44 24 08 50 E8 18 D5 F3 FF 83 F8 01 1B D2 42 8B D$.P..........B. 0019FC88: 0019FCB4 04FA1D00: C6 E8 7B F4 FF FF 8B 04 24 83 C4 28 5E 5B C3 8B ..{.....$..(^[.. 0019FC8C: 004CEABE 04FA1D10: C0 55 8B EC 83 C4 F8 53 33 C9 89 4D F8 8B DA 89 .U.....S3..M....