0% found this document useful (0 votes)

16 views25 pages

MacroRecorder Error Log Analysis

Q: What role does the PCI standard host CPU bridge play in system architecture?

The PCI standard host CPU bridge serves as a crucial component in system architecture by acting as an interface between the CPU and the PCI bus. It manages data traffic and communication between the processor and peripheral devices, ensuring efficient data flow and system responsiveness, essential for achieving optimal performance .

Q: What are the implications of the driver version consistency for Intel(R) components in system performance?

Consistent driver versions for Intel(R) components ensure stability and predictability in system performance by harmonizing interactions between hardware and software layers. This consistency reduces the likelihood of compatibility issues, ensures optimal performance, and enhances device reliability .

Q: How do system enumeration features integrate with Windows device management?

System enumeration features enable Windows to identify and organize hardware devices, facilitating a structured approach to device management. These features allow the operating system to detect new devices, assign resources, and manage device configurations seamlessly, providing a consistent user experience .

Q: How does Microsoft Hyper-V interact with other system components?

Microsoft Hyper-V interacts with system components through a cohesive integration with the Windows operating system. It uses virtual network adaptors, virtual drivers, and system enumeration to manage virtual machines, thereby facilitating efficient resource management and isolation of virtual environments from the host .

Q: Evaluate the potential conflicts between system processes such as svchost.exe and user-installed applications.

Svchost.exe is a critical process that hosts multiple Windows services, which can sometimes lead to conflicts with user-installed applications that attempt to access the same resources or system libraries. Such conflicts could result in performance degradation or application errors, particularly if both entities require exclusive access to certain resources .

Q: What is the significance of advapi32.dll in the context of system processes?

The advapi32.dll file is a vital system library in Windows operating systems that provides advanced functionality to manage security and system procedures. It facilitates services like authentication, authorization, and advanced Windows registry operations, which are critical for system and application security .

Q: Assess the implications of stack dump analysis on system debugging and troubleshooting.

Stack dump analysis provides insights into the state of system memory and applications at the time of a crash, offering critical information for debugging. It allows developers and system administrators to identify the root cause of issues, understand the sequence of executions, and implement corrective measures, enhancing system stability and reliability .

Q: Why is the ntdll.dll file crucial for Windows system functions?

The ntdll.dll file is crucial as it contains NT kernel functions used by Windows system processes. It provides core services such as memory management, input/output processing, and system threading, which are fundamental for the operation of applications and services within the Windows environment .

Q: Analyze how ACPI compliance enhances system management and power efficiency.

ACPI compliance enhances system management by providing a standard power interface for controlling hardware components such as CPUs, devices, and peripherals. It facilitates energy efficiency through dynamic power management capabilities, which adjust power usage based on system activity, thereby optimizing performance and extending hardware lifespan .

Q: Discuss the role of svchost.exe in managing network services.

Svchost.exe manages network services by acting as a host process for multiple Windows service libraries required for network functionalities such as DHCP, DNS, and network connectivity services. It enables efficient resource sharing and reduces overhead by grouping related services into a single process, streamlining their management .

The document provides a detailed log of an error encountered by the MacroRecorder application, indicating an 'EOutOfResources' exception due to an invalid window handle. It includes system specifications such as the operating system, memory usage, and processor details, along with a call stack trace of the error. The log also lists various threads and modules involved in the execution of the application at the time of the error.

Uploaded by

Constante Fieira

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as TXT, PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

16 views25 pages

MacroRecorder Error Log Analysis

Uploaded by

Constante Fieira

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as TXT, PDF, TXT or read online on Scribd

date/time : 2024-08-01, 22:14:29, 507ms

computer name : DESKTOP-3D346FU

user name : Usuario
registered owner : Usuario
operating system : Windows 10 x64 build 19045
system language : Portuguese
system up time : 6 minutes 4 seconds
program up time : 3 minutes 35 seconds
processors : 4x Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
physical memory : 13034/16265 MB (free/total)
free disk space : (C:) 109,02 GB
display mode : 1600x900, 32 bit
process id : $780
allocated memory : 128,29 MB
largest free block : 1,44 GB
executable : [Link]
exec. date/time : 2023-10-20 18:37
version : [Link]
compiled with : Delphi 11
madExcept version : 5.1.2
callstack crc : $272b73b9, $33be3b1f, $0effb1d7
exception number : 1
exception class : EOutOfResources
exception message : O identificador da janela é inválido.

main thread ($1284):

00d158b3 +077 [Link] [Link] GDIError
00d158ef +007 [Link] [Link] GDICheck
00d1ab4b +117 [Link] [Link] CopyBitmap
00d1b58b +063 [Link] [Link] [Link]
00d1d7af +04b [Link] [Link] [Link]
00d1cff3 +00b [Link] [Link] [Link]
00e0096e +0b2 [Link] GraphUtilsWin 60 +28 GetWindowBmp
00e5faf0 +014 [Link] GraphUtilsFMX 769 +1 GetDesktopRegion
014ca3c9 +0c5 [Link] MainU 4616 +28 FindPicture
014caa74 +254 [Link] MainU 4875 +106
[Link]
01246fee +082 [Link] FindPicDlgU 356 +11
[Link]
00a1f759 +015 [Link] [Link] [Link]
00a1f704 +014 [Link] [Link] [Link]
00c21705 +089 [Link] [Link]
[Link]
7699641b +00b [Link] DispatchMessageW
00c37e11 +051 [Link] [Link] 841 +10
[Link]
00b12ebb +03b [Link] [Link] 1879 +3
[Link]
00c3dd79 +0a9 [Link] [Link] 3453 +18
[Link]
00c3dde9 +119 [Link] [Link] 3466 +31
[Link]
00b174d6 +0c6 [Link] [Link] 3478 +12
[Link]
01480a55 +411 [Link] MacroDlgU 340 +57
MacroDialogEditExecute
014d16a3 +1cf [Link] MainU 7611 +30
[Link]
014c165e +00a [Link] MainU 1929 +0
[Link]$ActRec.$0$Body$ActRec.$0$0$Body
007e676b +187 [Link] [Link] CheckSynchronize
007e67f1 +20d [Link] [Link] CheckSynchronize
007e68b5 +2d1 [Link] [Link] CheckSynchronize
007e68d6 +2f2 [Link] [Link] CheckSynchronize
00d9b460 +7bc [Link] [Link]
[Link]
007ea8d4 +014 [Link] [Link] StdWndProc
7699641b +00b [Link] DispatchMessageW
00c37e11 +051 [Link] [Link] 841 +10
[Link]
00b12ebb +03b [Link] [Link] 1879 +3
[Link]
00c37bda +06a [Link] [Link] 745 +17 [Link]
00b13923 +03f [Link] [Link] 2207 +3 [Link]
0151eb54 +1a8 [Link] MacroRecorder 193 +54 initialization
0151eb6f +1c3 [Link] MacroRecorder 194 +55 initialization
7604fcc7 +017 [Link]
BaseThreadInitThunk

thread $6d8:
7699cc07 +47 [Link] MsgWaitForMultipleObjectsEx
7699cbaa +1a [Link] MsgWaitForMultipleObjects
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
722d67df +00 [Link]

thread $640 (TRVMessagingSystem):

752fa49d +fd [Link] WaitForMultipleObjectsEx
00941862 +56 [Link] [Link] [Link]
00eb472f +17 [Link] fmxRVMessages 214 +2 [Link]
007599db +2b [Link] madExcept HookedTThreadExecute
00759a46 +96 [Link] madExcept HookedTThreadExecute
007e6935 +49 [Link] [Link] ThreadProc
007e6998 +ac [Link] [Link] ThreadProc
006ab448 +28 [Link] System 39 +0 ThreadWrapper
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
007e69fc +18 [Link] [Link] [Link]

thread $1180:
752fa49d +fd [Link] WaitForMultipleObjectsEx
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
75b9ce57 +00 [Link]

thread $21d0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1d04:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1d3c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $c2c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $26ec:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $870:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1a80:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $16e8:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1b70:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1854:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $50c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2b3c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2714:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1f98:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $27cc:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $24d8:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $12e0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $26e8:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $14d4:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $16b0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $144c:
7604fcc7 +17 [Link] BaseThreadInitThunk
thread $1bdc:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1624:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1698:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1ed8: <priority:15>

7699c0f8 +28 [Link] GetMessageW
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
00406b2f +00 [Link]

thread $1524: <priority:15>

thread $53c: <priority:15>

thread $1358:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $23bc: <priority:15>

thread $2710: <priority:15>

thread $109c:
7604fcc7 +17 [Link] BaseThreadInitThunk
thread $1ff4: <priority:15>
7699c0f8 +28 [Link] GetMessageW
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
00406b2f +00 [Link]

thread $eec (TAnonymousThread):

752e21c3 +093 [Link] WaitForSingleObjectEx
752e211d +00d [Link] WaitForSingleObject
0070383e +002 [Link] [Link] WaitForSyncWaitObj
00703a2f +01f [Link] [Link] WaitOrSignalObj
006aa605 +065 [Link] System 39 +0 [Link]
006aa642 +0a2 [Link] System 39 +0 [Link]
006aa6af +02b [Link] System 39 +0 [Link]
007e7541 +179 [Link] [Link] [Link]
007e7681 +049 [Link] [Link] [Link]
014c16b9 +055 [Link] MainU 1926 +1
[Link]$ActRec.$0$Body
014c16d4 +070 [Link] MainU 1931 +6
[Link]$ActRec.$0$Body
007e4b9d +005 [Link] [Link] [Link]
007599db +02b [Link] madExcept HookedTThreadExecute
00759a46 +096 [Link] madExcept HookedTThreadExecute
007e6935 +049 [Link] [Link] ThreadProc
007e6998 +0ac [Link] [Link] ThreadProc
006ab448 +028 [Link] System 39 +0 ThreadWrapper
007598c1 +00d [Link] madExcept CallThreadProcSafe
00759926 +032 [Link] madExcept ThreadExceptFrame
0075999c +0a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +017 [Link] BaseThreadInitThunk
>> created by main thread ($1284) at:
007e69fc +018 [Link] [Link] [Link]

thread $16c4: <priority:15>

modules:
00400000 [Link] [Link] C:\Users\Usuario\
Desktop\Macro Recorder (xMacros)
006a0000 [Link] [Link] C:\Users\Usuario\
Desktop\Macro Recorder (xMacros)
05a40000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
6f060000 [Link] 7.0.19041.4355 C:\Windows\system32
6f1f0000 [Link] 10.0.19041.4474 C:\Windows\System32
6f290000 [Link] 10.0.19041.3636 C:\Windows\System32
6f510000 [Link] 10.0.19041.4651 C:\Windows\SYSTEM32
6f5d0000 [Link] 6.30.19041.4355 C:\Windows\System32
6f7b0000 [Link] 10.0.19041.4474 C:\Windows\System32
6fb70000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
6fc50000 [Link] 10.0.19041.4648 C:\Windows\system32
6fdd0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
6ffe0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
70500000 [Link] 20.19.15.4531 C:\Windows\SYSTEM32
70dd0000 [Link] 20.19.15.4531 C:\Windows\SYSTEM32
719b0000 [Link] 10.0.19041.4597 C:\Windows\system32
71b50000 [Link] 10.0.19041.4597 C:\Windows\system32
71f60000 [Link] 10.0.19041.4597 C:\Windows\System32
72080000 [Link] 10.0.19041.4355 C:\Windows\system32
72260000 [Link] 10.0.19041.4597 C:\Windows\WinSxS\
x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4597_none_d954b6f7e1016a2a
723d0000 [Link] 10.0.19041.3996 C:\Windows\SYSTEM32
72560000 [Link] 10.0.19041.4474 C:\Windows\SYSTEM32
72850000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72b30000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72c10000 [Link] C:\Windows\SYSTEM32
72d20000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
72d30000 [Link] 10.0.19041.3636 C:\Windows\System32
72d60000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72d90000 [Link] 6.10.19041.4355 C:\Windows\WinSxS\
x86_microsoft.[Link]-
controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c
72fa0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
73050000 [Link] 10.0.19041.3636 C:\Windows\System32
73070000 [Link] 10.0.19041.4412 C:\Windows\SYSTEM32
730a0000 d3d10_1core.dll 10.0.19041.1 C:\Windows\SYSTEM32
730b0000 d3d10_1.dll 10.0.19041.1 C:\Windows\SYSTEM32
73270000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
73370000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
73450000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
73480000 [Link] 10.0.19041.4648 C:\Windows\SYSTEM32
73ad0000 [Link] 10.0.19041.3758 C:\Windows\SYSTEM32
73c00000 [Link] 11.0.19041.4355 C:\Windows\SYSTEM32
74150000 [Link] 10.0.19041.4239 C:\Windows\SYSTEM32
74240000 [Link] 7.2.19041.3636 C:\Windows\system32
74330000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74360000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74370000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
74380000 [Link] 10.0.19041.4648 C:\Windows\system32
74400000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
74560000 [Link] 10.0.19041.4597 C:\Windows\system32
74630000 [Link] 10.0.19041.4355 C:\Windows\system32
74670000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
746a0000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
74cb0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74cc0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74eb0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74ec0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
74f30000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
74f40000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
75010000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
751d0000 [Link] 10.0.19041.4648 C:\Windows\System32
75410000 [Link] 10.0.19041.4648 C:\Windows\System32
75500000 msvcp_win.dll 10.0.19041.3636 C:\Windows\System32
75a20000 [Link] 10.0.19041.3996 C:\Windows\System32
75ac0000 [Link] 10.0.19041.4597 C:\Windows\System32
75d40000 [Link] 10.0.19041.3636 C:\Windows\System32
75d60000 [Link] 10.0.19041.4648 C:\Windows\System32
75e10000 [Link] 10.0.19041.4355 C:\Windows\System32
75eb0000 [Link] 7.0.19041.3636 C:\Windows\System32
75f70000 [Link] 10.0.19041.4597 C:\Windows\System32
76030000 [Link] 10.0.19041.4597 C:\Windows\System32
76120000 [Link] 10.0.19041.4522 C:\Windows\System32
761b0000 [Link] 10.0.19041.3636 C:\Windows\System32
762b0000 [Link] 10.0.19041.4597 C:\Windows\System32
76330000 [Link] 10.0.19041.4355 C:\Windows\System32
76420000 [Link] 10.0.19041.3636 C:\Windows\System32
76590000 [Link] 10.0.19041.4355 C:\Windows\System32
76640000 [Link] 10.0.19041.4597 C:\Windows\System32
766c0000 [Link] 10.0.19041.3636 C:\Windows\System32
767e0000 WS2_32.dll 10.0.19041.3636 C:\Windows\System32
76850000 [Link] 10.0.19041.4597 C:\Windows\System32
76930000 [Link] 10.0.19041.4474 C:\Windows\System32
76960000 [Link] 10.0.19041.4648 C:\Windows\System32
76b00000 [Link] 2001.12.10941.16384 C:\Windows\System32
76b80000 [Link] 10.0.19041.4648 C:\Windows\System32
77180000 [Link] 10.0.19041.4474 C:\Windows\System32
771c0000 [Link] 10.0.19041.4522 C:\Windows\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
0064 Registry 0 0 0
018c [Link] 0 0 0
0230 [Link] 0 0 0
0304 [Link] 0 0 0
030c [Link] 1 0 0
035c [Link] 0 0 0
036c [Link] 0 0 0
03e4 [Link] 0 0 0
0164 [Link] 0 0 0
0268 [Link] 0 0 0
02d4 [Link] 0 0 0
0398 [Link] 1 0 0
0404 [Link] 1 0 0
0484 [Link] 0 0 0
048c [Link] 0 0 0
0494 [Link] 0 0 0
049c [Link] 0 0 0
04e4 [Link] 0 0 0
051c [Link] 0 0 0
05a0 [Link] 0 0 0
05c0 [Link] 0 0 0
05dc [Link] 1 0 0
060c [Link] 0 0 0
0628 [Link] 0 0 0
0694 [Link] 0 0 0
0714 [Link] 0 0 0
073c [Link] 0 0 0
0750 [Link] 0 0 0
07bc [Link] 0 0 0
07d4 [Link] 0 0 0
07dc [Link] 0 0 0
0618 [Link] 0 0 0
0764 [Link] 0 0 0
0838 [Link] 0 0 0
0840 [Link] 0 0 0
0848 [Link] 0 0 0
08a8 [Link] 0 0 0
0948 [Link] 0 0 0
09a4 [Link] 0 0 0
09ac [Link] 0 0 0
09f0 [Link] 0 0 0
0a74 [Link] 0 0 0
0a9c [Link] 0 0 0
0ab4 [Link] 0 0 0
0ac4 [Link] 1 0 0
0ad8 [Link] 0 0 0
0ae8 [Link] 0 0 0
0b4c Memory Compression 0 0 0
0b5c [Link] 0 0 0
0b98 [Link] 0 0 0
0ba0 [Link] 0 0 0
0bc8 [Link] 0 0 0
07e8 [Link] 0 0 0
0968 [Link] 0 0 0
0c20 [Link] 0 0 0
0dd0 [Link] 0 0 0
0e14 [Link] 0 0 0
0e40 [Link] 0 0 0
0ecc [Link] 1 0 0
0ee0 [Link] 1 0 0
0ef4 [Link] 0 0 0
0efc [Link] 0 0 0
0f78 [Link] 0 0 0
0fb0 [Link] 0 0 0
0ff4 [Link] 0 0 0
0c38 [Link] 0 0 0
1004 [Link] 0 0 0
1084 [Link] 0 0 0
108c [Link] 0 0 0
10f4 [Link] 0 0 0
10fc [Link] 0 0 0
110c [Link] 0 0 0
1104 [Link] 0 0 0
1118 [Link] 0 0 0
1130 [Link] 0 0 0
1148 [Link] 0 0 0
1154 [Link] 0 0 0
1184 [Link] 0 0 0
11bc [Link] 0 0 0
11e8 [Link] 0 0 0
11f0 PsiService_2.exe 0 0 0
1200 [Link] 0 0 0
1228 [Link] 0 0 0
1234 [Link] 0 0 0
1258 TeamViewer_Service.exe 0 0 0
1260 [Link] 0 0 0
1270 [Link] 0 0 0
1500 [Link] 0 0 0
1610 [Link] 0 0 0
1724 [Link] 0 0 0
1884 [Link] 0 0 0
18e0 [Link] 0 0 0
18fc [Link] 0 0 0
1960 [Link] 0 0 0
1a90 [Link] 0 0 0
1a98 [Link] 1 0 15 normal C:\Windows\System32
1b04 [Link] 1 0 1 normal C:\Windows\System32
1b38 [Link] 1 4 10 normal C:\Windows\System32
1b98 [Link] 1 10 6 normal C:\Windows\System32
1ba0 [Link] 0 0 0
1144 [Link] 0 0 0
14b0 [Link] 0 0 0
1ce0 [Link] 0 0 0
1df4 [Link] 1 84 54 above normal C:\Program Files\Synaptics\
SynTP
1ed0 [Link] 0 0 0
1ee8 [Link] 1 290 322 normal C:\Windows
1fcc [Link] 1 0 0
1fe0 [Link] 0 0 0
1cb0 [Link] 1 10 15 normal C:\Windows\System32
08e8 [Link] 1 10 14 normal C:\Windows\System32
0d34 [Link] 1 7 4 normal C:\Windows\System32
1ac4 [Link] 1 0 5 normal C:\Windows\System32
1f08 [Link] 1 0 14 normal C:\Windows\SystemApps\
[Link].StartMenuExperienceHost_cw5n1h2txyewy
1eb0 [Link] 1 40 2 normal C:\Windows\System32
2090 [Link] 0 0 0
214c [Link] 1 14 56 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
21b8 [Link] 0 0 0
22a4 [Link] 1 42 5 normal C:\Windows\System32
2528 [Link] 0 0 0
25cc [Link] 0 0 0
2670 [Link] 1 0 0
2690 [Link] 1 0 0
2798 [Link] 0 0 0
27e0 [Link] 1 0 26 normal C:\Windows\SystemApps\
[Link].CBS_cw5n1h2txyewy
24d4 [Link] 0 0 0
1738 [Link] 1 0 17 normal C:\Program Files\
WindowsApps\Microsoft.YourPhone_1.24062.101.0_x64__8wekyb3d8bbwe
163c [Link] 1 0 3 normal C:\Windows\System32
15f0 [Link] 1 0 2 normal C:\Windows\System32
2658 [Link] 1 0 2 normal C:\Windows\System32
1d0c [Link] 1 0 6 normal C:\Windows\System32
15ec [Link] 1 7 6 normal C:\Windows\System32
2034 [Link] 0 0 0
16ac [Link] 1 242 115 normal C:\Users\Usuario\AppData\
Local\Microsoft\OneDrive
28a0 [Link] 1 4 42 normal C:\Program Files (x86)\
Microsoft\Edge\Application
29a4 [Link] 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2ad0 [Link] 1 1 5 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b08 [Link] 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b10 [Link] 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2860 [Link] 1 0 3 normal C:\Program Files (x86)\
Common Files\Java\Java Update
0e90 [Link] 1 56 31 normal C:\Windows\System32
2bec [Link] 1 0 14 normal C:\Program Files\
WindowsApps\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe
07c4 [Link] 1 0 1 normal C:\Windows\System32
29b4 [Link] 1 11 34 normal C:\Windows\
ImmersiveControlPanel
12c8 [Link] 1 0 1 normal C:\Windows\System32\oobe
1388 [Link] 1 0 1 normal C:\Windows\System32
0af8 [Link] 1 6 35 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
0c3c [Link] 1 0 10 normal C:\Windows\System32
2bbc [Link] 0 0 0
2514 [Link] 0 0 0
0f28 [Link] 0 0 0
24e8 [Link] 0 0 0
215c [Link] 0 0 0
0780 [Link] 1 99 93 normal C:\Users\Usuario\Desktop\
Macro Recorder (xMacros)
059c [Link] 0 0 0
192c [Link] 0 0 0
2350 [Link] 1 290 168 normal C:\Program Files (x86)\
Corel\CorelDRAW Graphics Suite X7\Programs
1788 [Link] 1 0 6 normal C:\Windows
1dec [Link] 1 0 1 normal C:\Windows\System32
0bb8 [Link] 1 1 51 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
2538 [Link] 1 7 6 normal C:\Program Files (x86)\
Common Files\Java\Java Update

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Fax
- Fila de Impressão da Raiz
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Generic USB Hub
- Generic USB Hub
- Generic USB Hub
- Intel(R) 8 Series USB Enhanced Host Controller #1 - 9C26
- Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)
- Realtek USB 2.0 Card Reader (driver 10.0.17134.31243)
- USB Composite Device
- USB Composite Device
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub (USB 3.0)
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- PC ACPI de base x64
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- KINGSTON SA400S37240G
- WD Elements 2621 USB Device
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- AMD Radeon R7 M260 (driver 27.20.1034.6)
- Intel(R) HD Graphics Family (driver 20.19.15.4531)
+ {4d36e96a-e325-11ce-bfc1-08002be10318}
- Controlador AHCI SATA Padrão
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Dispositivo de teclado HID
- Teclado Padrão PS/2
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Realtek High Definition Audio (driver 6.0.1.7544)
- Áudio Intel(R) para telas (driver 6.16.0.3197)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Monitor Genérico PnP
- Monitor Genérico PnP
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Dell Touchpad (driver [Link])
- Mouse compatível com HID
- Mouse compatível com PS/2
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #2
- Qualcomm QCA9565 802.11b/g/n Wireless Adapter (driver [Link])
- Realtek PCIe FE Family Controller (driver 10.3.723.2015)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Controlador de Espaços de Armazenamento da Microsoft
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Barramento do Redirecionador de Dispositivos de Área de Trabalho Remota
- Botão de Recurso fixo ACPI
- Botão Suspensão ACPI
- CMOS do sistema/relógio em tempo real
- Complexo da Raiz de PCI Express
- Controlador de acesso direto à memória
- Controlador de High Definition Audio
- Controlador de High Definition Audio
- Controlador de interrupção programável
- Controlador Host Intel(R) Serial IO I2C - 9C62 (driver [Link])
- desligar ACPI
- Dispositivo herdado
- Driver de Arbitragem de Carregamento
- Driver de Infraestrutura de Virtualização Microsoft Hyper-V
- Driver de Renderização Básico da Microsoft
- Driver de Vídeo Básico da Microsoft
- Enumerador de Adaptador de Rede Virtual NDIS
- Enumerador de Barramento de Composição
- Enumerador de Barramento de Raiz UMBus
- Enumerador de Dispositivos de Software Plug and Play
- Enumerador de Unidade Virtual Microsoft
- Gerenciador de Volumes
- Intel(R) 8 Series LPC Controller (Premium SKU) - 9C43 (driver [Link])
- Intel(R) 8 Series PCI Express Root Port #3 - 9C14 (driver [Link])
- Intel(R) 8 Series PCI Express Root Port #4 - 9C16 (driver [Link])
- Intel(R) 8 Series PCI Express Root Port #5 - 9C18 (driver [Link])
- Intel(R) 8 Series SMBus Controller - 9C22 (driver [Link])
- Intel(R) Management Engine Interface (driver 11.7.0.1045)
- Intel(R) Serial IO GPIO Host Controller - INT33C7 (driver [Link])
- Interface de Gerenciamento do Microsoft Windows para ACPI
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- PCI standard host CPU bridge
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Tampa ACPI
- Timer de eventos de alta precisão
- Timer do sistema
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
- Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
- Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
- Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Cópia de sombra de volume genérica
- Cópia de sombra de volume genérica
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Componente de software genérico
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Wi-Fi
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Adaptador de CA da Microsoft
- Bateria de Método de Controle Compatível com ACPI da Microsoft
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- Airplane Mode Switch (driver [Link])
- Airplane Mode Switch Collection (driver [Link])
- Controlador de sistema compatível com HID
- Dispositivo compatível com HID
- Dispositivo de controle de consumidor compatível com HID
- Dispositivo de Entrada USB
- Dispositivo de Entrada USB
- Dispositivo de Entrada USB
- Dispositivo de Entrada USB
- Dispositivo definido pelo fornecedor compatível com HID
- Dispositivo definido pelo fornecedor compatível com HID
- Dispositivo HID I2C
- Synaptics HID Device (driver [Link])
- Tela touch compatível com HID
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Fones de ouvido / Alto falantes (Realtek High Definition Audio)
- Microfone (Realtek High Definition Audio)
- SyncMaster (Áudio Intel(R) para telas)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Enumerador Bluetooth da Microsoft
- Enumerador LE Bluetooth da Microsoft
- Qualcomm QCA9565 Bluetooth 4.0 (driver [Link])
+ {eec5ad98-8080-425f-922a-dabf3de3f69a}
- Backup
cpu registers:
eax = 0a9caec8
ebx = 00000578
ecx = 007a0bf4
edx = 01dfec5c
esi = 00000000
edi = 00000000
eip = 00d158b8
esp = 01dfec8c
ebp = 01dfeed0

stack dump:
01dfec8c b8 58 d1 00 de fa ed 0e - 01 00 00 00 07 00 00 00 .X..............
01dfec9c a0 ec df 01 b8 58 d1 00 - c8 ae 9c 0a 78 05 00 00 .....X......x...
01dfecac 00 00 00 00 00 00 00 00 - d0 ee df 01 bc ec df 01 ................
01dfecbc e0 ee df 01 f0 aa 6a 00 - d0 ee df 01 00 00 00 00 ......j.........
01dfeccc 00 00 00 00 4f 00 20 00 - 69 00 64 00 65 00 6e 00 ....O. .i.d.e.n.
01dfecdc 74 00 69 00 66 00 69 00 - 63 00 61 00 64 00 6f 00 t.i.f.i.c.a.d.o.
01dfecec 72 00 20 00 64 00 61 00 - 20 00 6a 00 61 00 6e 00 r. .d.a. .j.a.n.
01dfecfc 65 00 6c 00 61 00 20 00 - e9 00 20 00 69 00 6e 00 e.l.a. ... .i.n.
01dfed0c 76 00 e1 00 6c 00 69 00 - 64 00 6f 00 2e 00 0d 00 v...l.i.d.o.....
01dfed1c 0a 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
01dfed2c 60 ed df 01 a8 8c 3d 71 - 00 00 00 00 e4 ed df 01 `.....=q........
01dfed3c 00 00 00 00 e4 ed df 01 - c8 0b 87 0f 00 05 00 40 ...............@
01dfed4c 00 ee 01 c0 00 00 00 00 - 80 01 00 00 00 00 00 00 ................
01dfed5c 80 e9 84 71 80 ed df 01 - 62 84 3d 71 00 00 00 00 ...q....b.=q....
01dfed6c e4 ed df 01 20 c5 11 0b - 78 c3 11 0b 30 c3 11 0b .... ...x...0...
01dfed7c 00 00 00 00 18 ef df 01 - 2e 4d 10 71 c8 0b 87 0f .........M.q....
01dfed8c e4 ed df 01 38 c2 28 02 - 50 42 10 71 d3 53 10 71 ....8.(.PB.q.S.q
01dfed9c 00 00 00 00 57 00 00 00 - 74 ef df 01 00 00 00 00 ....W...t.......
01dfedac 00 00 40 00 30 2d 29 02 - 01 00 00 00 00 00 00 00 ..@.0-).........
01dfedbc 30 c3 11 0b 00 00 00 00 - 11 04 00 00 03 00 00 00 0...............

disassembling:
[...]
00e0095f 60 lea eax, [ebp-$20]
00e00962 call -$74a0ab ($6b68bc) ; [Link]
00e00967 mov edx, eax
00e00969 mov eax, [ebp-$c]
00e0096c mov ecx, [eax]
00e0096e > call dword ptr [ecx+$38]
00e00971 63 push $26
00e00973 push ebx
00e00974 call -$744071 ($6bc908) ; [Link]
00e00979 and eax, $100
00e0097e cmp eax, $100
[...]

date/time : 2024-08-01, 22:15:47, 172ms

computer name : DESKTOP-3D346FU
user name : Usuario
registered owner : Usuario
operating system : Windows 10 x64 build 19045
system language : Portuguese
system up time : 7 minutes 22 seconds
program up time : 1 minute 13 seconds
processors : 4x Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
physical memory : 12539/16265 MB (free/total)
free disk space : (C:) 109,58 GB
display mode : 1600x900, 32 bit
process id : $42c
allocated memory : 126,48 MB
largest free block : 1,44 GB
executable : [Link]
exec. date/time : 2023-10-20 18:37
version : [Link]
compiled with : Delphi 11
madExcept version : 5.1.2
callstack crc : $272b73b9, $6fd75fcc, $225c2941
exception number : 1
exception class : EOutOfResources
exception message : O identificador da janela é inválido.

main thread ($1edc):

00d158b3 +077 [Link] [Link] GDIError
00d158ef +007 [Link] [Link] GDICheck
00d1ab4b +117 [Link] [Link] CopyBitmap
00d1b58b +063 [Link] [Link] [Link]
00d1d7af +04b [Link] [Link] [Link]
00d1cff3 +00b [Link] [Link] [Link]
00e0096e +0b2 [Link] GraphUtilsWin 60 +28 GetWindowBmp
00e5faf0 +014 [Link] GraphUtilsFMX 769 +1 GetDesktopRegion
014ca3c9 +0c5 [Link] MainU 4616 +28 FindPicture
014caa74 +254 [Link] MainU 4875 +106
[Link]
01246fee +082 [Link] FindPicDlgU 356 +11
[Link]
00a1f759 +015 [Link] [Link] [Link]
00a1f704 +014 [Link] [Link] [Link]
00c21705 +089 [Link] [Link]
[Link]
7699641b +00b [Link] DispatchMessageW
00c37e11 +051 [Link] [Link] 841 +10
[Link]
00b12ebb +03b [Link] [Link] 1879 +3
[Link]
00c3dd79 +0a9 [Link] [Link] 3453 +18
[Link]
00c3dde9 +119 [Link] [Link] 3466 +31
[Link]
00b174d6 +0c6 [Link] [Link] 3478 +12
[Link]
01480506 +44e [Link] MacroDlgU 241 +66 MacroDialogExecute
014cd0d9 +015 [Link] MainU 6031 +3
[Link]
014d83a2 +002 [Link] MainU 9929 +0
[Link]
007e9a9b +00f [Link] [Link]
[Link]
00a03e97 +09b [Link] [Link]
[Link]
007e98cc +034 [Link] [Link]
[Link]
009d9d48 +11c [Link] [Link] [Link]
00988d07 +077 [Link] [Link] [Link]
00984649 +0a1 [Link] [Link]
[Link]
00984686 +0de [Link] [Link]
[Link]
00a1f759 +015 [Link] [Link] [Link]
00a1f704 +014 [Link] [Link] [Link]
00c21705 +089 [Link] [Link]
[Link]
7699641b +00b [Link] DispatchMessageW
00c37e11 +051 [Link] [Link] 841 +10
[Link]
00b12ebb +03b [Link] [Link] 1879 +3
[Link]
00c37bda +06a [Link] [Link] 745 +17 [Link]
00b13923 +03f [Link] [Link] 2207 +3 [Link]
0151eb54 +1a8 [Link] MacroRecorder 193 +54 initialization
0151eb6f +1c3 [Link] MacroRecorder 194 +55 initialization
7604fcc7 +017 [Link]
BaseThreadInitThunk

thread $1ea8:
7699cc07 +47 [Link] MsgWaitForMultipleObjectsEx
7699cbaa +1a [Link] MsgWaitForMultipleObjects
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1edc) at:
722d67df +00 [Link]

thread $235c (TRVMessagingSystem):

thread $2dc:
752fa49d +fd [Link] WaitForMultipleObjectsEx
007598c1 +0d [Link] madExcept CallThreadProcSafe
00759926 +32 [Link] madExcept ThreadExceptFrame
0075999c +a8 [Link] madExcept ThreadExceptFrame
7604fcc7 +17 [Link] BaseThreadInitThunk
>> created by main thread ($1edc) at:
75b9ce57 +00 [Link]

thread $eb0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2048:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2328:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $bbc:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $11a8:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $b08:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $29c0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $af4:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $27f0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $dec:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $23f8:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1210:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $3ec:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $464:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $44c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $9d0:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $1f58:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $c04:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $e20:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2a60:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $b0c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $2a58:
7604fcc7 +17 [Link] BaseThreadInitThunk
thread $3ac:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $b3c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $261c:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $278:
7604fcc7 +17 [Link] BaseThreadInitThunk

thread $640: <priority:15>

thread $28f0: <priority:15>

modules:
00400000 [Link] [Link] C:\Users\Usuario\
Desktop\Macro Recorder (xMacros)
006a0000 [Link] [Link] C:\Users\Usuario\
Desktop\Macro Recorder (xMacros)
05a70000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
6f060000 [Link] 7.0.19041.4355 C:\Windows\system32
6f1f0000 [Link] 10.0.19041.4474 C:\Windows\System32
6f290000 [Link] 10.0.19041.3636 C:\Windows\System32
6f510000 [Link] 10.0.19041.4651 C:\Windows\SYSTEM32
6f5d0000 [Link] 6.30.19041.4355 C:\Windows\System32
6f7b0000 [Link] 10.0.19041.4474 C:\Windows\System32
6fb70000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
6fc50000 [Link] 10.0.19041.4648 C:\Windows\system32
6fdd0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
6ffe0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
70500000 [Link] 20.19.15.4531 C:\Windows\SYSTEM32
70dd0000 [Link] 20.19.15.4531 C:\Windows\SYSTEM32
719b0000 [Link] 10.0.19041.4597 C:\Windows\system32
71b50000 [Link] 10.0.19041.4597 C:\Windows\system32
71f60000 [Link] 10.0.19041.4597 C:\Windows\System32
72080000 [Link] 10.0.19041.4355 C:\Windows\system32
72260000 [Link] 10.0.19041.4597 C:\Windows\WinSxS\
x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4597_none_d954b6f7e1016a2a
723d0000 [Link] 10.0.19041.3996 C:\Windows\SYSTEM32
72560000 [Link] 10.0.19041.4474 C:\Windows\SYSTEM32
72850000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72b30000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72c10000 [Link] C:\Windows\SYSTEM32
72d20000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
72d30000 [Link] 10.0.19041.3636 C:\Windows\System32
72d60000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
72d90000 [Link] 6.10.19041.4355 C:\Windows\WinSxS\
x86_microsoft.[Link]-
controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c
72fa0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
73050000 [Link] 10.0.19041.3636 C:\Windows\System32
73070000 [Link] 10.0.19041.4412 C:\Windows\SYSTEM32
730a0000 d3d10_1core.dll 10.0.19041.1 C:\Windows\SYSTEM32
730b0000 d3d10_1.dll 10.0.19041.1 C:\Windows\SYSTEM32
73270000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
73370000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
73450000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
73480000 [Link] 10.0.19041.4648 C:\Windows\SYSTEM32
73ad0000 [Link] 10.0.19041.3758 C:\Windows\SYSTEM32
73c00000 [Link] 11.0.19041.4355 C:\Windows\SYSTEM32
74150000 [Link] 10.0.19041.4239 C:\Windows\SYSTEM32
74240000 [Link] 7.2.19041.3636 C:\Windows\system32
74330000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74360000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74370000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
74380000 [Link] 10.0.19041.4648 C:\Windows\system32
74400000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
74560000 [Link] 10.0.19041.4597 C:\Windows\system32
74630000 [Link] 10.0.19041.4355 C:\Windows\system32
74670000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
746a0000 [Link] 10.0.19041.4597 C:\Windows\SYSTEM32
74cb0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74cc0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74eb0000 [Link] 10.0.19041.3636 C:\Windows\SYSTEM32
74ec0000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
74f30000 [Link] 10.0.19041.1 C:\Windows\SYSTEM32
74f40000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
75010000 [Link] 10.0.19041.4355 C:\Windows\SYSTEM32
751d0000 [Link] 10.0.19041.4648 C:\Windows\System32
75410000 [Link] 10.0.19041.4648 C:\Windows\System32
75500000 msvcp_win.dll 10.0.19041.3636 C:\Windows\System32
75a20000 [Link] 10.0.19041.3996 C:\Windows\System32
75ac0000 [Link] 10.0.19041.4597 C:\Windows\System32
75d40000 [Link] 10.0.19041.3636 C:\Windows\System32
75d60000 [Link] 10.0.19041.4648 C:\Windows\System32
75e10000 [Link] 10.0.19041.4355 C:\Windows\System32
75eb0000 [Link] 7.0.19041.3636 C:\Windows\System32
75f70000 [Link] 10.0.19041.4597 C:\Windows\System32
76030000 [Link] 10.0.19041.4597 C:\Windows\System32
76120000 [Link] 10.0.19041.4522 C:\Windows\System32
761b0000 [Link] 10.0.19041.3636 C:\Windows\System32
762b0000 [Link] 10.0.19041.4597 C:\Windows\System32
76330000 [Link] 10.0.19041.4355 C:\Windows\System32
76420000 [Link] 10.0.19041.3636 C:\Windows\System32
76590000 [Link] 10.0.19041.4355 C:\Windows\System32
76640000 [Link] 10.0.19041.4597 C:\Windows\System32
766c0000 [Link] 10.0.19041.3636 C:\Windows\System32
767e0000 WS2_32.dll 10.0.19041.3636 C:\Windows\System32
76850000 [Link] 10.0.19041.4597 C:\Windows\System32
76930000 [Link] 10.0.19041.4474 C:\Windows\System32
76960000 [Link] 10.0.19041.4648 C:\Windows\System32
76b00000 [Link] 2001.12.10941.16384 C:\Windows\System32
76b80000 [Link] 10.0.19041.4648 C:\Windows\System32
77180000 [Link] 10.0.19041.4474 C:\Windows\System32
771c0000 [Link] 10.0.19041.4522 C:\Windows\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
0064 Registry 0 0 0
018c [Link] 0 0 0
0230 [Link] 0 0 0
0304 [Link] 0 0 0
030c [Link] 1 0 0
035c [Link] 0 0 0
036c [Link] 0 0 0
03e4 [Link] 0 0 0
0164 [Link] 0 0 0
0268 [Link] 0 0 0
02d4 [Link] 0 0 0
0398 [Link] 1 0 0
0404 [Link] 1 0 0
0484 [Link] 0 0 0
048c [Link] 0 0 0
0494 [Link] 0 0 0
049c [Link] 0 0 0
04e4 [Link] 0 0 0
051c [Link] 0 0 0
05a0 [Link] 0 0 0
05c0 [Link] 0 0 0
05dc [Link] 1 0 0
060c [Link] 0 0 0
0628 [Link] 0 0 0
0694 [Link] 0 0 0
0714 [Link] 0 0 0
073c [Link] 0 0 0
0750 [Link] 0 0 0
07bc [Link] 0 0 0
07d4 [Link] 0 0 0
07dc [Link] 0 0 0
0618 [Link] 0 0 0
0764 [Link] 0 0 0
0838 [Link] 0 0 0
0840 [Link] 0 0 0
0848 [Link] 0 0 0
08a8 [Link] 0 0 0
0948 [Link] 0 0 0
09a4 [Link] 0 0 0
09ac [Link] 0 0 0
09f0 [Link] 0 0 0
0a74 [Link] 0 0 0
0a9c [Link] 0 0 0
0ab4 [Link] 0 0 0
0ac4 [Link] 1 0 0
0ad8 [Link] 0 0 0
0ae8 [Link] 0 0 0
0b4c Memory Compression 0 0 0
0b5c [Link] 0 0 0
0b98 [Link] 0 0 0
0ba0 [Link] 0 0 0
0bc8 [Link] 0 0 0
07e8 [Link] 0 0 0
0968 [Link] 0 0 0
0c20 [Link] 0 0 0
0dd0 [Link] 0 0 0
0e14 [Link] 0 0 0
0e40 [Link] 0 0 0
0ecc [Link] 1 0 0
0ee0 [Link] 1 0 0
0ef4 [Link] 0 0 0
0efc [Link] 0 0 0
0f78 [Link] 0 0 0
0fb0 [Link] 0 0 0
0ff4 [Link] 0 0 0
0c38 [Link] 0 0 0
1004 [Link] 0 0 0
1084 [Link] 0 0 0
108c [Link] 0 0 0
10f4 [Link] 0 0 0
10fc [Link] 0 0 0
110c [Link] 0 0 0
1104 [Link] 0 0 0
1118 [Link] 0 0 0
1130 [Link] 0 0 0
1148 [Link] 0 0 0
1154 [Link] 0 0 0
1184 [Link] 0 0 0
11bc [Link] 0 0 0
11e8 [Link] 0 0 0
11f0 PsiService_2.exe 0 0 0
1200 [Link] 0 0 0
1228 [Link] 0 0 0
1234 [Link] 0 0 0
1258 TeamViewer_Service.exe 0 0 0
1260 [Link] 0 0 0
1270 [Link] 0 0 0
1500 [Link] 0 0 0
1610 [Link] 0 0 0
1724 [Link] 0 0 0
1884 [Link] 0 0 0
18e0 [Link] 0 0 0
18fc [Link] 0 0 0
1960 [Link] 0 0 0
1a90 [Link] 0 0 0
1a98 [Link] 1 0 11 normal C:\Windows\System32
1b04 [Link] 1 0 1 normal C:\Windows\System32
1b38 [Link] 1 4 8 normal C:\Windows\System32
1b98 [Link] 1 10 6 normal C:\Windows\System32
1ba0 [Link] 0 0 0
1144 [Link] 0 0 0
14b0 [Link] 0 0 0
1ce0 [Link] 0 0 0
1df4 [Link] 1 84 54 above normal C:\Program Files\Synaptics\
SynTP
1ed0 [Link] 0 0 0
1ee8 [Link] 1 290 323 normal C:\Windows
1fcc [Link] 1 0 0
1fe0 [Link] 0 0 0
1cb0 [Link] 1 10 15 normal C:\Windows\System32
08e8 [Link] 1 10 14 normal C:\Windows\System32
0d34 [Link] 1 7 4 normal C:\Windows\System32
1ac4 [Link] 1 0 5 normal C:\Windows\System32
1f08 [Link] 1 0 14 normal C:\Windows\SystemApps\
[Link].StartMenuExperienceHost_cw5n1h2txyewy
1eb0 [Link] 1 40 1 normal C:\Windows\System32
2090 [Link] 0 0 0
214c [Link] 1 14 56 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
21b8 [Link] 0 0 0
22a4 [Link] 1 42 4 normal C:\Windows\System32
2528 [Link] 0 0 0
2670 [Link] 1 0 0
2690 [Link] 1 0 0
2798 [Link] 0 0 0
27e0 [Link] 1 0 26 normal C:\Windows\SystemApps\
[Link].CBS_cw5n1h2txyewy
24d4 [Link] 0 0 0
1738 [Link] 1 0 16 normal C:\Program Files\
WindowsApps\Microsoft.YourPhone_1.24062.101.0_x64__8wekyb3d8bbwe
163c [Link] 1 0 3 normal C:\Windows\System32
15f0 [Link] 1 0 1 normal C:\Windows\System32
2658 [Link] 1 0 1 normal C:\Windows\System32
1d0c [Link] 1 0 5 normal C:\Windows\System32
15ec [Link] 1 7 5 normal C:\Windows\System32
2034 [Link] 0 0 0
16ac [Link] 1 242 115 normal C:\Users\Usuario\AppData\
Local\Microsoft\OneDrive
28a0 [Link] 1 4 42 normal C:\Program Files (x86)\
Microsoft\Edge\Application
29a4 [Link] 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2ad0 [Link] 1 1 5 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b08 [Link] 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b10 [Link] 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2860 [Link] 1 0 2 normal C:\Program Files (x86)\
Common Files\Java\Java Update
0e90 [Link] 1 56 31 normal C:\Windows\System32
2bec [Link] 1 0 14 normal C:\Program Files\
WindowsApps\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe
07c4 [Link] 1 0 1 normal C:\Windows\System32
29b4 [Link] 1 11 34 normal C:\Windows\
ImmersiveControlPanel
12c8 [Link] 1 0 1 normal C:\Windows\System32\oobe
1388 [Link] 1 0 1 normal C:\Windows\System32
0af8 [Link] 1 6 32 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
0c3c [Link] 1 0 6 normal C:\Windows\System32
2bbc [Link] 0 0 0
2514 [Link] 0 0 0
0f28 [Link] 0 0 0
24e8 [Link] 0 0 0
215c [Link] 0 0 0
059c [Link] 0 0 0
192c [Link] 0 0 0
2350 [Link] 1 290 167 normal C:\Program Files (x86)\
Corel\CorelDRAW Graphics Suite X7\Programs
1788 [Link] 1 0 5 normal C:\Windows
1dec [Link] 1 0 1 normal C:\Windows\System32
0bb8 [Link] 1 1 51 normal C:\Windows\SystemApps\
[Link].Search_cw5n1h2txyewy
2538 [Link] 1 7 6 normal C:\Program Files (x86)\
Common Files\Java\Java Update
042c [Link] 1 86 82 normal C:\Users\Usuario\Desktop\
Macro Recorder (xMacros)
1848 [Link] 0 0 0
04c4 [Link] 0 0 0
0860 [Link] 1 0 6 normal C:\Windows\System32
2308 [Link] 1 21 57 normal C:\Program Files (x86)\
Google\Chrome\Application
22f0 [Link] 1 0 4 normal C:\Program Files (x86)\
Google\Chrome\Application
0b10 [Link] 1 7 12 above normal C:\Program Files (x86)\
Google\Chrome\Application
105c [Link] 1 0 1 normal C:\Program Files (x86)\
Google\Chrome\Application
0fc8 [Link] 1 0 0 normal C:\Program Files (x86)\
Google\Chrome\Application
2994 [Link] 1 0 0 idle C:\Program Files (x86)\
Google\Chrome\Application
29ac [Link] 1 0 0 normal C:\Program Files (x86)\
Google\Chrome\Application
175c [Link] 1 0 0 normal C:\Program Files (x86)\
Google\Chrome\Application
283c [Link] 1 0 0 normal C:\Program Files (x86)\
Google\Chrome\Application
1518 [Link] 1 0 0 idle C:\Program Files (x86)\
Google\Chrome\Application
1418 [Link] 1 0 0 idle C:\Program Files (x86)\
Google\Chrome\Application
2938 [Link] 0 0 0
0be8 [Link] 0 0 0
0dcc [Link] 0 0 0

cpu registers:
eax = 10a10958
ebx = 00000578
ecx = 007a0bf4
edx = 01d6f1a4
esi = 00000000
edi = 00000000
eip = 00d158b8
esp = 01d6f1d4
ebp = 01d6f418

stack dump:
01d6f1d4 b8 58 d1 00 de fa ed 0e - 01 00 00 00 07 00 00 00 .X..............
01d6f1e4 e8 f1 d6 01 b8 58 d1 00 - 58 09 a1 10 78 05 00 00 .....X..X...x...
01d6f1f4 00 00 00 00 00 00 00 00 - 18 f4 d6 01 04 f2 d6 01 ................
01d6f204 28 f4 d6 01 f0 aa 6a 00 - 18 f4 d6 01 00 00 00 00 (.....j.........
01d6f214 00 00 00 00 4f 00 20 00 - 69 00 64 00 65 00 6e 00 ....O. .i.d.e.n.
01d6f224 74 00 69 00 66 00 69 00 - 63 00 61 00 64 00 6f 00 t.i.f.i.c.a.d.o.
01d6f234 72 00 20 00 64 00 61 00 - 20 00 6a 00 61 00 6e 00 r. .d.a. .j.a.n.
01d6f244 65 00 6c 00 61 00 20 00 - e9 00 20 00 69 00 6e 00 e.l.a. ... .i.n.
01d6f254 76 00 e1 00 6c 00 69 00 - 64 00 6f 00 2e 00 0d 00 v...l.i.d.o.....
01d6f264 0a 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
01d6f274 a8 f2 d6 01 a8 8c 3d 71 - 00 00 00 00 2c f3 d6 01 ......=q....,...
01d6f284 00 00 00 00 2c f3 d6 01 - f8 ad f2 0e 00 05 00 40 ....,..........@
01d6f294 c0 20 02 c0 00 00 00 00 - 50 00 00 00 00 00 00 00 . ......P.......
01d6f2a4 80 e9 84 71 c8 f2 d6 01 - 62 84 3d 71 00 00 00 00 ...q....b.=q....
01d6f2b4 2c f3 d6 01 a0 2c 25 0b - f8 2a 25 0b b0 2a 25 0b ,....,%..*%..*%.
01d6f2c4 00 00 00 00 60 f4 d6 01 - 2e 4d 10 71 f8 ad f2 0e ....`....M.q....
01d6f2d4 2c f3 d6 01 b0 d1 0a 02 - 50 42 10 71 d3 53 10 71 ,.......PB.q.S.q
01d6f2e4 84 b0 2f 71 57 00 00 00 - 00 00 40 00 02 00 00 00 ../qW.....@.....
01d6f2f4 0a 83 10 40 b0 3c 0b 02 - 01 00 00 00 00 00 00 00 ...@.<..........
01d6f304 b0 2a 25 0b 00 00 00 00 - 11 04 00 00 03 00 00 00 .*%.............

Common questions