date/time : 2022-12-29, [Link], 687ms
computer name : DESKTOP-350809O
user name : dolfo <admin>
registered owner : [Link]@[Link]
operating system : Windows 10 x64 build 19044
system language : Portuguese
system up time : 39 minutes 32 seconds
program up time : 3 seconds
processors : 8x Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
physical memory : 11975/16276 MB (free/total)
free disk space : (C:) 131,64 GB
display mode : 1366x768, 32 bit
process id : $1bc4
allocated memory : 80,55 MB
largest free block : 836,16 MB
executable : [Link]
exec. date/time : 2020-05-09 19:23
version : 1.0.7434.4057
compiled with : Delphi 10.2 Tokyo
madExcept version : 4.0.17
callstack crc : $88e87b8e, $50940ff7, $6f0272fa
count : 4
exception number : 1
exception class : EIdHTTPProtocolException
exception message : HTTP/1.1 404 Not Found.
main thread ($1bd0):
006e8110 +1b8 [Link] IdHTTP CheckException
006e854f +2c3 [Link] IdHTTP [Link]
006e8a90 +1c0 [Link] IdHTTP [Link]
006e8889 +055 [Link] IdHTTP [Link]
006e3d04 +030 [Link] IdHTTP [Link]
00707ee5 +085 [Link] Unit1 438 +4 [Link]
005329ed +125 [Link] [Link] CheckSynchronize
0065299b +76b [Link] [Link] [Link]
00536498 +014 [Link] [Link] StdWndProc
75885f7b +00b [Link] DispatchMessageW
0065335b +0f3 [Link] [Link] [Link]
0065339e +00a [Link] [Link] [Link]
006536d1 +0c9 [Link] [Link] [Link]
0071966d +061 [Link] Launcher 21 +5 initialization
75fb00f7 +017 [Link] BaseThreadInitThunk
thread $1084:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $30f0:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $1984:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $1ef0:
7554e16d +fd [Link] WaitForMultipleObjectsEx
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
75215f71 +00 [Link]
thread $27bc:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $2120:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $fd8:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $1930:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $1d1c:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $19c4:
7554e16d +fd [Link] WaitForMultipleObjectsEx
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by thread $27bc at:
757a1226 +00 [Link]
thread $930:
75543ff3 +93 [Link] WaitForSingleObjectEx
75543f4d +0d [Link] WaitForSingleObject
76a36dbc +8c [Link] _endthreadex
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f [Link] _beginthreadex
thread $1da0:
75543ff3 +93 [Link] WaitForSingleObjectEx
75543f4d +0d [Link] WaitForSingleObject
76a36dbc +8c [Link] _endthreadex
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f [Link] _beginthreadex
thread $5a8: <priority:-1>
7554e16d +fd [Link] WaitForMultipleObjectsEx
76a36dbc +8c [Link] _endthreadex
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f [Link] _beginthreadex
thread $134c:
7588c897 +47 [Link] MsgWaitForMultipleObjectsEx
75291332 +72 [Link] CoWaitForMultipleHandles
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
53642c3a +00 [Link]
thread $2278:
7588c897 +47 [Link] MsgWaitForMultipleObjectsEx
75291332 +72 [Link] CoWaitForMultipleHandles
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by thread $134c at:
53642c3a +00 [Link]
thread $3134 (TDownload): <priority:2>
75543ff3 +093 [Link] WaitForSingleObjectEx
75543f4d +00d [Link] WaitForSingleObject
00457af2 +002 [Link] [Link] WaitForSyncWaitObj
00457c3b +01f [Link] [Link] WaitOrSignalObj
00409d5d +065 [Link] System [Link]
00409dec +020 [Link] System [Link]
0053358c +140 [Link] [Link] [Link]
00533659 +04d [Link] [Link] [Link]
00707e56 +016 [Link] Unit1 428 +1 [Link]
004a7703 +02b [Link] madExcept HookedTThreadExecute
00532b51 +049 [Link] [Link] ThreadProc
0040ab44 +028 [Link] System ThreadWrapper
004a75e9 +00d [Link] madExcept CallThreadProcSafe
004a764e +032 [Link] madExcept ThreadExceptFrame
75fb00f7 +017 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
00708423 +3a3 [Link] Unit1 528 +59 Auto1
thread $ed0:
75fb00f7 +17 [Link] BaseThreadInitThunk
thread $650:
75543ff3 +93 [Link] WaitForSingleObjectEx
75543f4d +0d [Link] WaitForSingleObject
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
53642c3a +00 [Link]
thread $26ec: <priority:15>
7554e16d +fd [Link] WaitForMultipleObjectsEx
7554e053 +13 [Link] WaitForMultipleObjects
004a75e9 +0d [Link] madExcept CallThreadProcSafe
004a764e +32 [Link] madExcept ThreadExceptFrame
75fb00f7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1bd0) at:
536a02e0 +00 [Link]
modules:
00400000 [Link] 1.0.7434.4057 C:\Mu Arwen
11000000 [Link] [Link] C:\Mu Arwen
12000000 [Link] [Link] C:\Mu Arwen
46480000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
52740000 [Link] 10.0.19041.2075 C:\Windows\SYSTEM32
52d10000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
53230000 [Link] 11.0.19041.2364 C:\Windows\SYSTEM32
54490000 [Link] 11.0.19041.2311 C:\Windows\System32
57cb0000 [Link] 10.0.19041.2311 C:\Windows\SYSTEM32
587f0000 [Link] 10.0.19041.1266 C:\Windows\SYSTEM32
5e970000 [Link] 10.0.19041.546 C:\Windows\system32
5e990000 [Link] 10.0.19041.1202 C:\Windows\SYSTEM32
5e9a0000 [Link] 10.0.19041.2194 C:\Windows\System32
62840000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
64df0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
64f10000 [Link] 10.0.19041.2075 C:\Windows\SYSTEM32
64fb0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
64fe0000 [Link] C:\Windows\SYSTEM32
66680000 [Link] 10.0.19041.2075 C:\Windows\SYSTEM32
67690000 [Link] 10.0.19041.2075 C:\Windows\system32
67870000 [Link] 10.0.19041.2075 C:\Windows\system32
69790000 [Link] 11.0.19041.2193 C:\Windows\SYSTEM32
69d00000 [Link] 10.0.19041.1387 C:\Windows\system32
69e20000 [Link] 10.0.19041.2311 C:\Windows\system32
69ef0000 [Link] 10.0.19041.1865 C:\Windows\system32
6a170000 [Link] 6.10.19041.1110 C:\Windows\WinSxS\
x86_microsoft.[Link]-
controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
6a390000 [Link] 10.0.19041.746 C:\Windows\SYSTEM32
6a460000 [Link] 10.0.19041.2193 C:\Windows\system32
6a6e0000 [Link] 10.0.19041.2311 C:\Windows\SYSTEM32
6a7c0000 [Link] 10.0.19041.2193 C:\Windows\System32
6a860000 [Link] 10.0.19041.546 C:\Windows\System32
6aae0000 [Link] 10.0.19041.2075 C:\Windows\SYSTEM32
6abc0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
6abd0000 [Link] 10.0.19041.1706 C:\Windows\system32
6c5b0000 [Link] 10.0.19041.2311 C:\Windows\SYSTEM32
6c630000 [Link] 10.0.19041.1566 C:\Windows\SYSTEM32
6c840000 [Link] 10.0.19041.1052 C:\Windows\SYSTEM32
6d890000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
6d8b0000 [Link] 10.0.19041.906 C:\Windows\System32
6d8e0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
6d970000 [Link] [Link] C:\Windows\SYSTEM32
6d9b0000 [Link] 10.0.19041.1 C:\Windows\system32
6d9c0000 [Link] 10.0.19041.746 C:\Windows\SYSTEM32
6da00000 [Link] 10.0.19041.2311 C:\Windows\SYSTEM32
6da30000 [Link] 10.0.19041.2311 C:\Windows\SYSTEM32
6da50000 [Link] 11.0.19041.2130 C:\Windows\SYSTEM32
6daa0000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
6dab0000 [Link] 10.0.19041.1645 C:\Windows\System32
6dad0000 [Link] 10.0.19041.84 C:\Windows\SYSTEM32
6daf0000 [Link] 10.0.19041.2364 C:\Windows\SYSTEM32
6db60000 [Link] 10.0.19041.2130 C:\Windows\SYSTEM32
6dba0000 sfc_os.DLL 10.0.19041.2311 C:\Windows\SYSTEM32
6dbb0000 [Link] 10.0.19041.1806 C:\Windows\SYSTEM32
6dd20000 [Link] 10.0.19041.2130 C:\Windows\SYSTEM32
6dd50000 [Link] 11.0.19041.2130 C:\Windows\System32
6df80000 [Link] 10.0.19041.1466 C:\Windows\SYSTEM32
6df90000 [Link] 10.0.19041.1645 C:\Windows\SYSTEM32
6dfb0000 [Link] 11.0.19041.2251 C:\Windows\SYSTEM32
6e270000 [Link] 10.0.19041.2075 C:\Windows\SYSTEM32
6e2c0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
6e380000 [Link] 7.0.19041.1741 C:\Windows\System32
6e4c0000 [Link] 10.0.19041.572 C:\Windows\System32
6e800000 [Link] 10.0.19041.1682 C:\Windows\SYSTEM32
6e860000 [Link] 10.0.19041.546 C:\Windows\System32
6fd70000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
6fd80000 [Link] 10.0.19041.1865 C:\Windows\SYSTEM32
6fe50000 [Link] 10.0.19041.546 C:\Windows\system32
71fe0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
71ff0000 [Link] 10.0.19041.1052 C:\Windows\system32
72020000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
72040000 [Link] 10.0.19041.844 C:\Windows\System32
73f60000 [Link] C:\Windows\SYSTEM32
73f70000 [Link] 10.0.19041.2251 C:\Windows\SYSTEM32
748a0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
748b0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
748c0000 [Link] 10.0.19041.2311 C:\Windows\System32
74980000 [Link] 10.0.19041.2311 C:\Windows\System32
74f90000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
74fe0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
75010000 [Link] 10.0.19041.2193 C:\Windows\System32
750e0000 [Link] 10.0.19041.546 C:\Windows\SYSTEM32
75180000 [Link] 10.0.19041.2311 C:\Windows\System32
75400000 [Link] 10.0.19041.2130 C:\Windows\System32
75430000 [Link] 10.0.19041.2364 C:\Windows\System32
75750000 [Link] 10.0.19041.1889 C:\Windows\System32
75850000 [Link] 10.0.19041.2364 C:\Windows\System32
759f0000 [Link] 10.0.19041.2130 C:\Windows\System32
75ad0000 [Link] 10.0.19041.1865 C:\Windows\System32
75b50000 WS2_32.dll 10.0.19041.546 C:\Windows\System32
75bc0000 [Link] 10.0.19041.2075 C:\Windows\System32
75c10000 msvcp_win.dll 10.0.19041.789 C:\Windows\System32
75c90000 [Link] 10.0.19041.2364 C:\Windows\System32
75d70000 [Link] 10.0.19041.2193 C:\Windows\System32
75da0000 [Link] 10.0.19041.1023 C:\Windows\System32
75dc0000 [Link] 10.0.19041.2193 C:\Windows\System32
75ea0000 [Link] 10.0.19041.1645 C:\Windows\System32
75f30000 [Link] 10.0.19041.610 C:\Windows\System32
75f40000 [Link] 10.0.19041.1620 C:\Windows\System32
75f80000 [Link] 10.0.19041.546 C:\Windows\System32
75f90000 [Link] 10.0.19041.2364 C:\Windows\System32
76080000 [Link] 10.0.19041.2311 C:\Windows\System32
76640000 [Link] 10.0.19041.1806 C:\Windows\System32
76700000 [Link] 10.0.19041.1806 C:\Windows\System32
767b0000 [Link] 10.0.19041.1415 C:\Windows\System32
76980000 [Link] 10.0.19041.2311 C:\Windows\System32
769d0000 [Link] 7.0.19041.546 C:\Windows\System32
76b10000 [Link] 10.0.19041.2193 C:\Windows\System32
76f50000 [Link] 10.0.19041.2364 C:\Windows\System32
76f70000 [Link] 10.0.19041.789 C:\Windows\System32
77090000 [Link] 10.0.19041.1202 C:\Windows\System32
77180000 [Link] 10.0.19041.985 C:\Windows\System32
77220000 [Link] 2001.12.10941.16384 C:\Windows\System32
772c0000 [Link] 10.0.19041.2364 C:\Windows\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
007c Registry 0 0 0
0214 [Link] 0 0 0
02e4 [Link] 0 0 0
03b4 [Link] 0 0 0
03c0 [Link] 1 0 0
0258 [Link] 1 0 0
029c [Link] 0 0 0
0304 [Link] 0 0 0
03c4 [Link] 0 0 0
0358 [Link] 0 0 0
0330 [Link] 1 0 0
0424 [Link] 0 0 0
0460 [Link] 0 0 0
0498 [Link] 0 0 0
04f0 [Link] 1 0 0
0590 [Link] 0 0 0
0588 [Link] 0 0 0
05b0 [Link] 0 0 0
05b8 [Link] 0 0 0
05c8 [Link] 0 0 0
0640 [Link] 0 0 0
0648 [Link] 0 0 0
06e4 [Link] 0 0 0
06f4 [Link] 0 0 0
0708 [Link] 0 0 0
0754 [Link] 0 0 0
075c [Link] 0 0 0
07ac [Link] 0 0 0
07bc [Link] 0 0 0
0684 [Link] 0 0 0
0818 [Link] 0 0 0
086c [Link] 0 0 0
08ac [Link] 0 0 0
08e4 [Link] 0 0 0
0928 [Link] 0 0 0
098c [Link] 0 0 0
09f0 [Link] 0 0 0
0a50 [Link] 0 0 0
0a60 [Link] 0 0 0
0a6c [Link] 0 0 0
0ac8 [Link] 0 0 0
0ad4 [Link] 0 0 0
0b0c [Link] 0 0 0
0b2c [Link] 0 0 0
0b34 [Link] 0 0 0
0b6c [Link] 0 0 0
0b7c Memory Compression 0 0 0
0aa8 [Link] 0 0 0
0c08 [Link] 0 0 0
0c60 [Link] 0 0 0
0cd4 [Link] 0 0 0
0cd0 [Link] 0 0 0
0d74 [Link] 0 0 0
0da4 [Link] 0 0 0
0de0 [Link] 1 0 8 normal C:\Windows\System32
0e08 [Link] 1 0 1 normal C:\Windows\System32
0e4c [Link] 0 0 0
0e70 [Link] 0 0 0
0e78 [Link] 1 0 4 normal C:\Windows\System32
0f1c [Link] 0 0 0
0f2c [Link] 1 8 6 normal C:\Windows\System32
0f48 valorant_inj.exe 1 0 2 below normal C:\Users\dolfo\AppData\
Roaming
0fc8 [Link] 0 0 0
0ff8 [Link] 0 0 0
106c [Link] 0 0 0
1074 [Link] 0 0 0
10ec [Link] 0 0 0
10f4 [Link] 0 0 0
1108 [Link] 0 0 0
1114 [Link] 0 0 0
111c [Link] 0 0 0
1124 [Link] 0 0 0
1130 [Link] 0 0 0
1174 [Link] 0 0 0
1180 [Link] 0 0 0
1188 [Link] 0 0 0
1190 [Link] 0 0 0
1198 [Link] 0 0 0
11ac [Link] 0 0 0
11b4 [Link] 0 0 0
11c0 [Link] 0 0 0
11d8 [Link] 0 0 0
11e8 [Link] 1 2 22 high C:\Windows\System32
11f4 esif_uf.exe 0 0 0
121c [Link] 0 0 0
136c [Link] 0 0 0
13a0 [Link] 0 0 0
1490 jhi_service.exe 0 0 0
14b0 [Link] 0 0 0
1528 [Link] 0 0 0
1790 [Link] 1 10 15 normal C:\Windows\System32\
DriverStore\FileRepository\cui_dch.inf_amd64_7769fb49693b5f65
154c [Link] 0 0 0
17ec [Link] 1 239 262 normal C:\Windows
18bc [Link] 0 0 0
1af4 [Link] 0 0 0
1b9c [Link] 1 0 4 normal C:\Windows\System32
197c [Link] 0 0 0
196c [Link] 0 0 0
1a78 [Link] 0 0 0
192c [Link] 1 0 12 normal C:\Windows\SystemApps\
[Link].StartMenuExperienceHost_cw5n1h2txyewy
1c28 [Link] 1 40 1 normal C:\Windows\System32
1d38 [Link] 1 12 52 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
1d4c [Link] 0 0 0
1ea0 [Link] 1 36 6 normal C:\Windows\System32
1f2c [Link] 0 0 0
20b8 [Link] 1 6 22 normal C:\Windows\SystemApps\
Microsoft.LockApp_cw5n1h2txyewy
2108 [Link] 1 0 5 normal C:\Windows\System32
219c [Link] 1 68 13 normal C:\Windows\System32
231c [Link] 0 0 0
2370 [Link] 0 0 0
1c5c [Link] 0 0 0
23fc [Link] 1 0 16 normal C:\Program Files\
WindowsApps\Microsoft.YourPhone_1.22102.229.0_x64__8wekyb3d8bbwe
2280 [Link] 0 0 0
1670 [Link] 0 0 0
0530 [Link] 1 0 4 normal C:\Windows\System32
24d0 [Link] 1 0 3 normal C:\Windows\System32
2590 [Link] 1 0 1 normal C:\Windows\System32
1928 [Link] 1 0 7 normal C:\Program Files\
WindowsApps\5319275A.WhatsAppDesktop_2.2248.9.0_x64__cv1g1gvanyjgm
209c [Link] 0 0 0
2734 [Link] 0 0 0
2ba8 [Link] 1 7 6 normal C:\Windows\System32
2bd8 [Link] 0 0 0
2aa8 [Link] 1 13 6 normal C:\Program Files\Riot
Vanguard
28f8 [Link] 1 0 22 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
2a7c [Link] 1 183 83 normal C:\Users\dolfo\AppData\
Local\Microsoft\OneDrive
2974 [Link] 1 0 3 normal C:\Windows\System32
2db8 [Link] 1 361 129 normal C:\Program Files (x86)\
Steam
2dd4 [Link] 1 20 47 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2e50 [Link] 1 16 17 normal C:\Program Files (x86)\
Intel\Driver and Support Assistant
2ef8 [Link] 1 0 4 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2f5c [Link] 1 5 8 above normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2f88 [Link] 1 0 1 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
0b28 [Link] 1 16 40 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
1c94 [Link] 1 0 4 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
079c [Link] 1 0 13 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2490 [Link] 0 0 0
2d90 [Link] 1 3 12 above normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3008 [Link] 1 0 1 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3020 [Link] 1 8 10 normal C:\Program Files (x86)\
EPSON Software\Download Navigator
30b0 [Link] 1 7 6 below normal C:\Windows\System32
32d8 [Link] 1 0 1 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
3238 [Link] 1 0 1 normal C:\Windows\System32
324c [Link] 0 0 0
33ac [Link] 1 0 0 above normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3398 [Link] 1 0 0 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
32d0 [Link] 1 0 0 idle C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3730 [Link] 1 0 23 normal C:\Windows\SystemApps\
[Link].CBS_cw5n1h2txyewy
1f28 [Link] 1 28 27 normal C:\Windows\System32
34b0 [Link] 1 11 31 normal C:\Windows\
ImmersiveControlPanel
3320 [Link] 0 0 0
1e98 [Link] 1 0 1 normal C:\Windows\System32\oobe
199c [Link] 1 0 20 normal C:\Program Files\
WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe
3684 [Link] 1 0 1 normal C:\Windows\System32
3204 [Link] 1 0 1 normal C:\Windows\System32
2b3c [Link] 0 0 0
153c [Link] 0 0 0
3434 [Link] 0 0 0
17a0 [Link] 0 0 0
1a64 [Link] 0 0 0
3630 [Link] 1 0 5 below normal C:\Program Files\Samsung\
SamsungUpdate
31fc [Link] 1 0 0
31c4 [Link] 1 0 0
0a88 [Link] 1 2 53 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
1028 [Link] 1 0 8 normal C:\Program Files\
WindowsApps\Microsoft.ZuneVideo_10.22091.10031.0_x64__8wekyb3d8bbwe
1cd0 [Link] 1 0 9 normal C:\Program Files\
WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe
3174 [Link] 1 0 4 normal C:\Program Files\
WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe
2af8 [Link] 1 0 1 normal C:\Windows\System32
0338 [Link] 0 0 0
0938 [Link] 1 0 1 normal C:\Windows\System32
2724 [Link] 0 0 0
0964 [Link] 0 0 0
31a4 [Link] 1 0 1 idle C:\Windows\System32
0b50 [Link] 0 0 0 idle C:\Windows\System32
2068 [Link] 1 2 48 normal C:\Program Files (x86)\
Microsoft\Edge\Application
08b4 [Link] 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
0b04 [Link] 1 1 7 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
1454 [Link] 1 0 4 normal C:\Program Files (x86)\
Microsoft\Edge\Application
1d60 [Link] 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2d88 [Link] 1 0 0 idle C:\Program Files (x86)\
Microsoft\Edge\Application
1730 [Link] 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
37f8 [Link] 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
0e5c identity_helper.exe 1 0 5 normal C:\Program Files (x86)\
Microsoft\Edge\Application\108.0.1462.54
28ac [Link] 1 0 4 normal C:\Windows\System32
1bc4 [Link] 1 138 72 normal C:\Mu Arwen
0694 [Link] 0 0 0
0570 [Link] 0 0 0
hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Fax
- Fila de Impressão da Raiz
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Intel(R) USB 3.1 eXtensible Host Controller - 1.10 (Microsoft)
- USB Composite Device
- USB Root Hub (USB 3.0)
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- PC ACPI de base x64
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- NT-256
- TOSHIBA MQ04ABF100
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel(R) UHD Graphics 620 (driver 27.20.100.8336)
+ {4d36e96a-e325-11ce-bfc1-08002be10318}
- Intel(R) 300 Series Chipset Family SATA AHCI Controller (driver 17.11.0.1000)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Teclado Padrão PS/2
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Realtek(R) Audio (driver 6.0.8899.1)
- Áudio Intel(R) para telas (driver [Link])
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Monitor Genérico PnP
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Mouse compatível com HID
- Mouse compatível com HID
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #2
- Qualcomm Atheros QCA9377 Wireless Network Adapter (driver [Link])
- Realtek PCIe FE Family Controller (driver 10.42.526.2020)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Controlador de Espaços de Armazenamento da Microsoft
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Agregador do Processador ACPI
- Alarme de Ativação ACPI
- Barramento do Redirecionador de Dispositivos de Área de Trabalho Remota
- Botão de Recurso fixo ACPI
- Complexo da Raiz de PCI Express
- Controlador de interrupção programável
- controlador de áudio da tecnologia Intel(R) Smart Sound (driver 10.23.0.3349)
- desligar ACPI
- Driver de Arbitragem de Carregamento
- Driver de Infraestrutura de Virtualização Microsoft Hyper-V
- Driver de Renderização Básico da Microsoft
- Driver de Vídeo Básico da Microsoft
- Enumerador de Adaptador de Rede Virtual NDIS
- Enumerador de Barramento de Composição
- Enumerador de Barramento de Raiz UMBus
- Enumerador de Dispositivos de Software Plug and Play
- Enumerador de Unidade Virtual Microsoft
- Gerenciador de Volumes
- I/O LPC Controller - 9D84 for Intel(R) 300 Series Chipset Family On-Package
Platform Controller Hub (driver [Link])
- Intel(R) Dynamic Tuning Manager (driver 8.6.10400.9366)
- Intel(R) Dynamic Tuning Processor Participant (driver 8.6.10400.9366)
- Intel(R) Host Bridge/DRAM Registers - 3E34 (driver [Link])
- Intel(R) Management Engine Interface (driver 1914.12.0.1256)
- Intel(R) PCI Express Root Port #10 - 9DB1 (driver [Link])
- Intel(R) PCI Express Root Port #9 - 9DB0 (driver [Link])
- Intel(R) Power Engine Plug-in
- Intel(R) Serial IO GPIO Host Controller - INT34BB (driver 30.100.1915.1)
- Intel(R) Serial IO I2C Host Controller - 9DE8 (driver 30.100.1915.1)
- Intel(R) SMBus - 9DA3 (driver [Link])
- Intel(R) SPI (flash) Controller - 9DA4 (driver [Link])
- Intel(R) Thermal Subsystem - 9DF9 (driver [Link])
- Interface de Gerenciamento do Microsoft Windows para ACPI
- Interface de Gerenciamento do Microsoft Windows para ACPI
- Interface de Gerenciamento do Microsoft Windows para ACPI
- maxTouch I2C Boot Bridge Peripheral Driver (driver 10.1.14.10131)
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- PCI standard RAM Controller
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Samsung System Event Controller (driver [Link])
- Sistema Microsoft Compatível com UEFI
- Tampa ACPI
- tecnologia Intel(R) Smart Sound OED (driver 10.23.3349.230)
- Timer de eventos de alta precisão
- Timer do sistema
- Zona Térmica ACPI
- Zona Térmica ACPI
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Cópia de sombra de volume genérica
- Cópia de sombra de volume genérica
- Cópia de sombra de volume genérica
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Intel(R) Dynamic Application Loader Host Interface (driver 1.33.2019.512)
- Intel(R) Graphics Command Center (driver 27.20.100.8336)
- Intel(R) Graphics Control Panel (driver 27.20.100.8336)
- Intel(R) iCLS Client (driver [Link])
- Intel(R) Management and Security Application Local Management (driver
2130.1.16.1)
- Realtek Audio Effects Component (driver 11.0.6000.754)
- Realtek Audio Universal Service (driver [Link])
- Realtek Hardware Support Application (driver 11.0.6000.212)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Wi-Fi
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Adaptador de CA da Microsoft
- Bateria de Método de Controle Compatível com ACPI da Microsoft
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- Dispositivo de Entrada USB
- Dispositivo definido pelo fornecedor compatível com HID
- Dispositivo HID I2C
- Microsoft Input Configuration Device
- Teclado sensível ao toque compatível com HID
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Alto-falantes (Realtek(R) Audio)
- Microfone (Realtek(R) Audio)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Web Camera
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
- Trusted Platform Module 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Enumerador Bluetooth da Microsoft
- Enumerador LE Bluetooth da Microsoft
- Qualcomm Atheros QCA9377 Bluetooth (driver [Link])
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
- SAMSUNG ELECTRONICS System Firmware (driver [Link])
cpu registers:
eax = 027fb8c0
ebx = ffffffff
ecx = 00000000
edx = 00bf37d0
esi = 02720380
edi = 0019fbc4
eip = 006e8115
esp = 0019faf8
ebp = 0019fb6c
stack dump:
0019faf8 15 81 6e 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..n.............
0019fb08 0c fb 19 00 15 81 6e 00 - c0 b8 7f 02 ff ff ff ff ......n.........
0019fb18 80 03 72 02 c4 fb 19 00 - 6c fb 19 00 28 fb 19 00 ..r.....l...(...
0019fb28 34 fb 19 00 30 a2 40 00 - 6c fb 19 00 40 fb 19 00 4...0.@.l...@...
0019fb38 30 a2 40 00 6c fb 19 00 - 78 fb 19 00 30 a2 40 00 0.@.l...x...0.@.
0019fb48 6c fb 19 00 c4 fb 19 00 - 80 03 72 02 ff ff ff ff l.........r.....
0019fb58 00 00 00 00 00 00 00 00 - 00 00 01 01 08 31 7e 02 .............1~.
0019fb68 20 d0 7d 02 a4 fb 19 00 - 54 85 6e 00 a4 fb 19 00 .}.....T.n.....
0019fb78 ac fb 19 00 30 a2 40 00 - a4 fb 19 00 80 03 72 02 ....0.@.......r.
0019fb88 08 31 7e 02 00 00 00 00 - 00 00 00 00 84 fb 19 00 .1~.............
0019fb98 94 01 00 00 ff ff ff ff - e8 2c 7e 02 ec fb 19 00 .........,~.....
0019fba8 95 8a 6e 00 b8 fb 19 00 - 30 a2 40 00 ec fb 19 00 ..n.....0.@.....
0019fbb8 04 fc 19 00 30 a2 40 00 - ec fb 19 00 00 00 00 00 ....0.@.........
0019fbc8 08 31 7e 02 40 30 6e 00 - 00 00 00 00 00 00 00 00 .1~.@0n.........
0019fbd8 00 00 00 00 00 00 00 00 - 00 00 00 00 f0 64 7b 02 .............d{.
0019fbe8 00 00 00 00 20 fc 19 00 - 8f 88 6e 00 ff ff ff ff .... .....n.....
0019fbf8 c4 fb 19 00 08 31 7e 02 - 00 00 00 00 30 fc 19 00 .....1~.....0...
0019fc08 30 a2 40 00 20 fc 19 00 - 00 00 00 00 08 31 7e 02 0.@. ........1~.
0019fc18 f0 64 7b 02 00 00 00 00 - 48 fc 19 00 09 3d 6e 00 .d{.....H....=n.
0019fc28 ff ff ff ff 10 fc 19 00 - 50 fc 19 00 30 a2 40 00 ........P...0.@.
disassembling:
[...]
00707ecf call -$2b5d3c ($452198) ; [Link]
00707ed4 mov edx, [ebp-8]
00707ed7 mov eax, [$732ab0]
00707edc mov eax, [eax+$3ec]
00707ee2 mov ecx, [ebp-4]
00707ee5 > call -$24216 ($6e3cd4) ; [Link]
00707eea xor eax, eax
00707eec pop edx
00707eed pop ecx
00707eee pop ecx
00707eef mov fs:[eax], edx
[...]