date/time : 2022-12-29, 19:02:41, 687ms

computer name : DESKTOP-350809O

user name : dolfo <admin>
registered owner : dolfo.rodolfo@gmail.com
operating system : Windows 10 x64 build 19044
system language : Portuguese
system up time : 39 minutes 32 seconds
program up time : 3 seconds
processors : 8x Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
physical memory : 11975/16276 MB (free/total)
free disk space : (C:) 131,64 GB
display mode : 1366x768, 32 bit
process id : $1bc4
allocated memory : 80,55 MB
largest free block : 836,16 MB
executable : Launcher.exe
exec. date/time : 2020-05-09 19:23
version : 1.0.7434.4057
compiled with : Delphi 10.2 Tokyo
madExcept version : 4.0.17
callstack crc : $88e87b8e, $50940ff7, $6f0272fa
count : 4
exception number : 1
exception class : EIdHTTPProtocolException
exception message : HTTP/1.1 404 Not Found.

main thread ($1bd0):

006e8110 +1b8 Launcher.exe IdHTTP CheckException
006e854f +2c3 Launcher.exe IdHTTP TIdHTTPProtocol.ProcessResponse
006e8a90 +1c0 Launcher.exe IdHTTP TIdCustomHTTP.DoRequest
006e8889 +055 Launcher.exe IdHTTP TIdCustomHTTP.Get
006e3d04 +030 Launcher.exe IdHTTP TIdCustomHTTP.Get
00707ee5 +085 Launcher.exe Unit1 438 +4 TDownload.Baixa
005329ed +125 Launcher.exe System.Classes CheckSynchronize
0065299b +76b Launcher.exe Vcl.Forms TApplication.WndProc
00536498 +014 Launcher.exe System.Classes StdWndProc
75885f7b +00b USER32.dll DispatchMessageW
0065335b +0f3 Launcher.exe Vcl.Forms TApplication.ProcessMessage
0065339e +00a Launcher.exe Vcl.Forms TApplication.HandleMessage
006536d1 +0c9 Launcher.exe Vcl.Forms TApplication.Run
0071966d +061 Launcher.exe Launcher 21 +5 initialization
75fb00f7 +017 KERNEL32.DLL BaseThreadInitThunk

thread $1084:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $30f0:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $1984:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $1ef0:
7554e16d +fd KERNELBASE.dll WaitForMultipleObjectsEx
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
75215f71 +00 combase.dll
thread $27bc:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $2120:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $fd8:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $1930:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $1d1c:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $19c4:
7554e16d +fd KERNELBASE.dll WaitForMultipleObjectsEx
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by thread $27bc at:
757a1226 +00 CRYPT32.dll

thread $930:
75543ff3 +93 KERNELBASE.dll WaitForSingleObjectEx
75543f4d +0d KERNELBASE.dll WaitForSingleObject
76a36dbc +8c msvcrt.dll _endthreadex
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f msvcrt.dll _beginthreadex

thread $1da0:
75543ff3 +93 KERNELBASE.dll WaitForSingleObjectEx
75543f4d +0d KERNELBASE.dll WaitForSingleObject
76a36dbc +8c msvcrt.dll _endthreadex
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f msvcrt.dll _beginthreadex

thread $5a8: <priority:-1>

7554e16d +fd KERNELBASE.dll WaitForMultipleObjectsEx
76a36dbc +8c msvcrt.dll _endthreadex
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
76a36caf +7f msvcrt.dll _beginthreadex

thread $134c:
7588c897 +47 USER32.dll MsgWaitForMultipleObjectsEx
75291332 +72 combase.dll CoWaitForMultipleHandles
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
53642c3a +00 MSHTML.dll

thread $2278:
7588c897 +47 USER32.dll MsgWaitForMultipleObjectsEx
75291332 +72 combase.dll CoWaitForMultipleHandles
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by thread $134c at:
53642c3a +00 MSHTML.dll

thread $3134 (TDownload): <priority:2>

75543ff3 +093 KERNELBASE.dll WaitForSingleObjectEx
75543f4d +00d KERNELBASE.dll WaitForSingleObject
00457af2 +002 Launcher.exe System.SysUtils WaitForSyncWaitObj
00457c3b +01f Launcher.exe System.SysUtils WaitOrSignalObj
00409d5d +065 Launcher.exe System TMonitor.Wait
00409dec +020 Launcher.exe System TMonitor.Wait
0053358c +140 Launcher.exe System.Classes TThread.Synchronize
00533659 +04d Launcher.exe System.Classes TThread.Synchronize
00707e56 +016 Launcher.exe Unit1 428 +1 TDownload.Execute
004a7703 +02b Launcher.exe madExcept HookedTThreadExecute
00532b51 +049 Launcher.exe System.Classes ThreadProc
0040ab44 +028 Launcher.exe System ThreadWrapper
004a75e9 +00d Launcher.exe madExcept CallThreadProcSafe
004a764e +032 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +017 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
00708423 +3a3 Launcher.exe Unit1 528 +59 Auto1

thread $ed0:
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $650:
75543ff3 +93 KERNELBASE.dll WaitForSingleObjectEx
75543f4d +0d KERNELBASE.dll WaitForSingleObject
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
53642c3a +00 MSHTML.dll

thread $26ec: <priority:15>

7554e16d +fd KERNELBASE.dll WaitForMultipleObjectsEx
7554e053 +13 KERNELBASE.dll WaitForMultipleObjects
004a75e9 +0d Launcher.exe madExcept CallThreadProcSafe
004a764e +32 Launcher.exe madExcept ThreadExceptFrame
75fb00f7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($1bd0) at:
536a02e0 +00 MSHTML.dll

modules:
00400000 Launcher.exe 1.0.7434.4057 C:\Mu Arwen
11000000 libeay32.dll 1.0.2.10 C:\Mu Arwen
12000000 ssleay32.dll 1.0.2.10 C:\Mu Arwen
46480000 security.dll 10.0.19041.1 C:\Windows\SYSTEM32
52740000 d3d10warp.dll 10.0.19041.2075 C:\Windows\SYSTEM32
52d10000 d2d1.dll 10.0.19041.546 C:\Windows\SYSTEM32
53230000 MSHTML.dll 11.0.19041.2364 C:\Windows\SYSTEM32
54490000 ieframe.dll 11.0.19041.2311 C:\Windows\System32
57cb0000 dbgcore.DLL 10.0.19041.2311 C:\Windows\SYSTEM32
587f0000 AcLayers.DLL 10.0.19041.1266 C:\Windows\SYSTEM32
5e970000 ncryptsslp.dll 10.0.19041.546 C:\Windows\system32
5e990000 mskeyprotect.dll 10.0.19041.1202 C:\Windows\SYSTEM32
5e9a0000 schannel.dll 10.0.19041.2194 C:\Windows\System32
62840000 dxcore.dll 10.0.19041.546 C:\Windows\SYSTEM32
64df0000 NTASN1.dll 10.0.19041.546 C:\Windows\SYSTEM32
64f10000 apphelp.dll 10.0.19041.2075 C:\Windows\SYSTEM32
64fb0000 ncrypt.dll 10.0.19041.546 C:\Windows\SYSTEM32
64fe0000 TextShaping.dll C:\Windows\SYSTEM32
66680000 sfc.dll 10.0.19041.2075 C:\Windows\SYSTEM32
67690000 d3d11.dll 10.0.19041.2075 C:\Windows\system32
67870000 dcomp.dll 10.0.19041.2075 C:\Windows\system32
69790000 WININET.dll 11.0.19041.2193 C:\Windows\SYSTEM32
69d00000 dataexchange.dll 10.0.19041.1387 C:\Windows\system32
69e20000 dxgi.dll 10.0.19041.2311 C:\Windows\system32
69ef0000 twinapi.appcore.dll 10.0.19041.1865 C:\Windows\system32
6a170000 comctl32.dll 6.10.19041.1110 C:\Windows\WinSxS\
x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
6a390000 DWMAPI.DLL 10.0.19041.746 C:\Windows\SYSTEM32
6a460000 uxtheme.dll 10.0.19041.2193 C:\Windows\system32
6a6e0000 wintypes.dll 10.0.19041.2311 C:\Windows\SYSTEM32
6a7c0000 CoreMessaging.dll 10.0.19041.2193 C:\Windows\System32
6a860000 CoreUIComponents.dll 10.0.19041.546 C:\Windows\System32
6aae0000 textinputframework.dll 10.0.19041.2075 C:\Windows\SYSTEM32
6abc0000 DPAPI.DLL 10.0.19041.546 C:\Windows\SYSTEM32
6abd0000 windowscodecs.dll 10.0.19041.1706 C:\Windows\system32
6c5b0000 WINSPOOL.DRV 10.0.19041.2311 C:\Windows\SYSTEM32
6c630000 DWrite.dll 10.0.19041.1566 C:\Windows\SYSTEM32
6c840000 dbghelp.dll 10.0.19041.1052 C:\Windows\SYSTEM32
6d890000 wsock32.dll 10.0.19041.1 C:\Windows\SYSTEM32
6d8b0000 cryptnet.dll 10.0.19041.906 C:\Windows\System32
6d8e0000 SECUR32.DLL 10.0.19041.546 C:\Windows\SYSTEM32
6d970000 msls31.dll 3.10.349.0 C:\Windows\SYSTEM32
6d9b0000 msimtf.dll 10.0.19041.1 C:\Windows\system32
6d9c0000 MLANG.dll 10.0.19041.746 C:\Windows\SYSTEM32
6da00000 srpapi.dll 10.0.19041.2311 C:\Windows\SYSTEM32
6da30000 ondemandconnroutehelper.dll 10.0.19041.2311 C:\Windows\SYSTEM32
6da50000 msIso.dll 11.0.19041.2130 C:\Windows\SYSTEM32
6daa0000 IdnDL.dll 10.0.19041.1 C:\Windows\SYSTEM32
6dab0000 WKSCLI.DLL 10.0.19041.1645 C:\Windows\System32
6dad0000 olepro32.dll 10.0.19041.84 C:\Windows\SYSTEM32
6daf0000 FaultRep.dll 10.0.19041.2364 C:\Windows\SYSTEM32
6db60000 netapi32.dll 10.0.19041.2130 C:\Windows\SYSTEM32
6dba0000 sfc_os.DLL 10.0.19041.2311 C:\Windows\SYSTEM32
6dbb0000 MPR.dll 10.0.19041.1806 C:\Windows\SYSTEM32
6dd20000 SSPICLI.DLL 10.0.19041.2130 C:\Windows\SYSTEM32
6dd50000 iertutil.dll 11.0.19041.2130 C:\Windows\System32
6df80000 NETUTILS.DLL 10.0.19041.1466 C:\Windows\SYSTEM32
6df90000 srvcli.dll 10.0.19041.1645 C:\Windows\SYSTEM32
6dfb0000 urlmon.dll 11.0.19041.2251 C:\Windows\SYSTEM32
6e270000 WINSTA.dll 10.0.19041.2075 C:\Windows\SYSTEM32
6e2c0000 wtsapi32.dll 10.0.19041.546 C:\Windows\SYSTEM32
6e380000 PROPSYS.dll 7.0.19041.1741 C:\Windows\System32
6e4c0000 USERENV.dll 10.0.19041.572 C:\Windows\System32
6e800000 Fwpuclnt.dll 10.0.19041.1682 C:\Windows\SYSTEM32
6e860000 rasadhlp.dll 10.0.19041.546 C:\Windows\System32
6fd70000 WINNSI.DLL 10.0.19041.546 C:\Windows\SYSTEM32
6fd80000 DNSAPI.dll 10.0.19041.1865 C:\Windows\SYSTEM32
6fe50000 mswsock.dll 10.0.19041.546 C:\Windows\system32
71fe0000 CRYPTBASE.dll 10.0.19041.546 C:\Windows\SYSTEM32
71ff0000 rsaenh.dll 10.0.19041.1052 C:\Windows\system32
72020000 CRYPTSP.dll 10.0.19041.546 C:\Windows\SYSTEM32
72040000 profapi.dll 10.0.19041.844 C:\Windows\System32
73f60000 UMPDC.dll C:\Windows\SYSTEM32
73f70000 MSASN1.dll 10.0.19041.2251 C:\Windows\SYSTEM32
748a0000 version.dll 10.0.19041.546 C:\Windows\SYSTEM32
748b0000 kernel.appcore.dll 10.0.19041.546 C:\Windows\SYSTEM32
748c0000 Wldp.dll 10.0.19041.2311 C:\Windows\System32
74980000 windows.storage.dll 10.0.19041.2311 C:\Windows\System32
74f90000 powrprof.dll 10.0.19041.546 C:\Windows\SYSTEM32
74fe0000 ntmarta.dll 10.0.19041.546 C:\Windows\SYSTEM32
75010000 WINHTTP.dll 10.0.19041.2193 C:\Windows\System32
750e0000 iphlpapi.dll 10.0.19041.546 C:\Windows\SYSTEM32
75180000 combase.dll 10.0.19041.2311 C:\Windows\System32
75400000 GDI32.dll 10.0.19041.2130 C:\Windows\System32
75430000 KERNELBASE.dll 10.0.19041.2364 C:\Windows\System32
75750000 CRYPT32.dll 10.0.19041.1889 C:\Windows\System32
75850000 USER32.dll 10.0.19041.2364 C:\Windows\System32
759f0000 advapi32.dll 10.0.19041.2130 C:\Windows\System32
75ad0000 sechost.dll 10.0.19041.1865 C:\Windows\System32
75b50000 WS2_32.dll 10.0.19041.546 C:\Windows\System32
75bc0000 SHLWAPI.dll 10.0.19041.2075 C:\Windows\System32
75c10000 msvcp_win.dll 10.0.19041.789 C:\Windows\System32
75c90000 gdi32full.dll 10.0.19041.2364 C:\Windows\System32
75d70000 IMM32.DLL 10.0.19041.2193 C:\Windows\System32
75da0000 bcrypt.dll 10.0.19041.1023 C:\Windows\System32
75dc0000 MSCTF.dll 10.0.19041.2193 C:\Windows\System32
75ea0000 shcore.dll 10.0.19041.1645 C:\Windows\System32
75f30000 NSI.dll 10.0.19041.610 C:\Windows\System32
75f40000 cfgmgr32.dll 10.0.19041.1620 C:\Windows\System32
75f80000 Normaliz.dll 10.0.19041.546 C:\Windows\System32
75f90000 KERNEL32.DLL 10.0.19041.2364 C:\Windows\System32
76080000 SHELL32.dll 10.0.19041.2311 C:\Windows\System32
76640000 RPCRT4.dll 10.0.19041.1806 C:\Windows\System32
76700000 comdlg32.dll 10.0.19041.1806 C:\Windows\System32
767b0000 bcryptPrimitives.dll 10.0.19041.1415 C:\Windows\System32
76980000 WINTRUST.dll 10.0.19041.2311 C:\Windows\System32
769d0000 msvcrt.dll 7.0.19041.546 C:\Windows\System32
76b10000 SETUPAPI.dll 10.0.19041.2193 C:\Windows\System32
76f50000 win32u.dll 10.0.19041.2364 C:\Windows\System32
76f70000 ucrtbase.dll 10.0.19041.789 C:\Windows\System32
77090000 ole32.dll 10.0.19041.1202 C:\Windows\System32
77180000 OLEAUT32.dll 10.0.19041.985 C:\Windows\System32
77220000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32
772c0000 ntdll.dll 10.0.19041.2364 C:\Windows\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
007c Registry 0 0 0
0214 smss.exe 0 0 0
02e4 csrss.exe 0 0 0
03b4 wininit.exe 0 0 0
03c0 csrss.exe 1 0 0
0258 winlogon.exe 1 0 0
029c services.exe 0 0 0
0304 lsass.exe 0 0 0
03c4 svchost.exe 0 0 0
0358 fontdrvhost.exe 0 0 0
0330 fontdrvhost.exe 1 0 0
0424 WUDFHost.exe 0 0 0
0460 svchost.exe 0 0 0
0498 svchost.exe 0 0 0
04f0 dwm.exe 1 0 0
0590 svchost.exe 0 0 0
0588 svchost.exe 0 0 0
05b0 svchost.exe 0 0 0
05b8 svchost.exe 0 0 0
05c8 svchost.exe 0 0 0
0640 svchost.exe 0 0 0
0648 svchost.exe 0 0 0
06e4 svchost.exe 0 0 0
06f4 IntelCpHDCPSvc.exe 0 0 0
0708 svchost.exe 0 0 0
0754 svchost.exe 0 0 0
075c svchost.exe 0 0 0
07ac svchost.exe 0 0 0
07bc svchost.exe 0 0 0
0684 IntelCpHeciSvc.exe 0 0 0
0818 svchost.exe 0 0 0
086c svchost.exe 0 0 0
08ac svchost.exe 0 0 0
08e4 igfxCUIService.exe 0 0 0
0928 svchost.exe 0 0 0
098c svchost.exe 0 0 0
09f0 svchost.exe 0 0 0
0a50 svchost.exe 0 0 0
0a60 dasHost.exe 0 0 0
0a6c svchost.exe 0 0 0
0ac8 svchost.exe 0 0 0
0ad4 svchost.exe 0 0 0
0b0c svchost.exe 0 0 0
0b2c svchost.exe 0 0 0
0b34 svchost.exe 0 0 0
0b6c svchost.exe 0 0 0
0b7c Memory Compression 0 0 0
0aa8 svchost.exe 0 0 0
0c08 svchost.exe 0 0 0
0c60 svchost.exe 0 0 0
0cd4 svchost.exe 0 0 0
0cd0 svchost.exe 0 0 0
0d74 svchost.exe 0 0 0
0da4 svchost.exe 0 0 0
0de0 sihost.exe 1 0 8 normal C:\Windows\System32
0e08 svchost.exe 1 0 1 normal C:\Windows\System32
0e4c PresentationFontCache.exe 0 0 0
0e70 svchost.exe 0 0 0
0e78 svchost.exe 1 0 4 normal C:\Windows\System32
0f1c spoolsv.exe 0 0 0
0f2c taskhostw.exe 1 8 6 normal C:\Windows\System32
0f48 valorant_inj.exe 1 0 2 below normal C:\Users\dolfo\AppData\
Roaming
0fc8 svchost.exe 0 0 0
0ff8 svchost.exe 0 0 0
106c svchost.exe 0 0 0
1074 svchost.exe 0 0 0
10ec svchost.exe 0 0 0
10f4 svchost.exe 0 0 0
1108 svchost.exe 0 0 0
1114 AdminService.exe 0 0 0
111c escsvc64.exe 0 0 0
1124 DSAService.exe 0 0 0
1130 svchost.exe 0 0 0
1174 RtkAudUService64.exe 0 0 0
1180 RstMwService.exe 0 0 0
1188 svchost.exe 0 0 0
1190 svchost.exe 0 0 0
1198 OneApp.IGCC.WinService.exe 0 0 0
11ac svchost.exe 0 0 0
11b4 svchost.exe 0 0 0
11c0 SUService.exe 0 0 0
11d8 LMS.exe 0 0 0
11e8 ctfmon.exe 1 2 22 high C:\Windows\System32
11f4 esif_uf.exe 0 0 0
121c MsMpEng.exe 0 0 0
136c svchost.exe 0 0 0
13a0 svchost.exe 0 0 0
1490 jhi_service.exe 0 0 0
14b0 svchost.exe 0 0 0
1528 svchost.exe 0 0 0
1790 igfxEM.exe 1 10 15 normal C:\Windows\System32\
DriverStore\FileRepository\cui_dch.inf_amd64_7769fb49693b5f65
154c svchost.exe 0 0 0
17ec explorer.exe 1 239 262 normal C:\Windows
18bc svchost.exe 0 0 0
1af4 svchost.exe 0 0 0
1b9c svchost.exe 1 0 4 normal C:\Windows\System32
197c svchost.exe 0 0 0
196c svchost.exe 0 0 0
1a78 DSAUpdateService.exe 0 0 0
192c StartMenuExperienceHost.exe 1 0 12 normal C:\Windows\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
1c28 RuntimeBroker.exe 1 40 1 normal C:\Windows\System32
1d38 SearchApp.exe 1 12 52 normal C:\Windows\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy
1d4c SearchIndexer.exe 0 0 0
1ea0 RuntimeBroker.exe 1 36 6 normal C:\Windows\System32
1f2c svchost.exe 0 0 0
20b8 LockApp.exe 1 6 22 normal C:\Windows\SystemApps\
Microsoft.LockApp_cw5n1h2txyewy
2108 RuntimeBroker.exe 1 0 5 normal C:\Windows\System32
219c RuntimeBroker.exe 1 68 13 normal C:\Windows\System32
231c NisSrv.exe 0 0 0
2370 svchost.exe 0 0 0
1c5c svchost.exe 0 0 0
23fc PhoneExperienceHost.exe 1 0 16 normal C:\Program Files\
WindowsApps\Microsoft.YourPhone_1.22102.229.0_x64__8wekyb3d8bbwe
2280 svchost.exe 0 0 0
1670 svchost.exe 0 0 0
0530 taskhostw.exe 1 0 4 normal C:\Windows\System32
24d0 dllhost.exe 1 0 3 normal C:\Windows\System32
2590 RuntimeBroker.exe 1 0 1 normal C:\Windows\System32
1928 WhatsApp.exe 1 0 7 normal C:\Program Files\
WindowsApps\5319275A.WhatsAppDesktop_2.2248.9.0_x64__cv1g1gvanyjgm
209c svchost.exe 0 0 0
2734 svchost.exe 0 0 0
2ba8 SecurityHealthSystray.exe 1 7 6 normal C:\Windows\System32
2bd8 SecurityHealthService.exe 0 0 0
2aa8 vgtray.exe 1 13 6 normal C:\Program Files\Riot
Vanguard
28f8 ShellExperienceHost.exe 1 0 22 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
2a7c OneDrive.exe 1 183 83 normal C:\Users\dolfo\AppData\
Local\Microsoft\OneDrive
2974 RuntimeBroker.exe 1 0 3 normal C:\Windows\System32
2db8 steam.exe 1 361 129 normal C:\Program Files (x86)\
Steam
2dd4 Discord.exe 1 20 47 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2e50 DSATray.exe 1 16 17 normal C:\Program Files (x86)\
Intel\Driver and Support Assistant
2ef8 Discord.exe 1 0 4 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2f5c Discord.exe 1 5 8 above normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2f88 Discord.exe 1 0 1 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
0b28 steamwebhelper.exe 1 16 40 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
1c94 steamwebhelper.exe 1 0 4 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
079c Discord.exe 1 0 13 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
2490 steamservice.exe 0 0 0
2d90 steamwebhelper.exe 1 3 12 above normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3008 steamwebhelper.exe 1 0 1 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3020 EPSDNMON.EXE 1 8 10 normal C:\Program Files (x86)\
EPSON Software\Download Navigator
30b0 RtkAudUService64.exe 1 7 6 below normal C:\Windows\System32
32d8 Discord.exe 1 0 1 normal C:\Users\dolfo\AppData\
Local\Discord\app-1.0.9008
3238 RuntimeBroker.exe 1 0 1 normal C:\Windows\System32
324c svchost.exe 0 0 0
33ac steamwebhelper.exe 1 0 0 above normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3398 steamwebhelper.exe 1 0 0 normal C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
32d0 steamwebhelper.exe 1 0 0 idle C:\Program Files (x86)\
Steam\bin\cef\cef.win7x64
3730 TextInputHost.exe 1 0 23 normal C:\Windows\SystemApps\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
1f28 ApplicationFrameHost.exe 1 28 27 normal C:\Windows\System32
34b0 SystemSettings.exe 1 11 31 normal C:\Windows\
ImmersiveControlPanel
3320 svchost.exe 0 0 0
1e98 UserOOBEBroker.exe 1 0 1 normal C:\Windows\System32\oobe
199c CalculatorApp.exe 1 0 20 normal C:\Program Files\
WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe
3684 RuntimeBroker.exe 1 0 1 normal C:\Windows\System32
3204 svchost.exe 1 0 1 normal C:\Windows\System32
2b3c svchost.exe 0 0 0
153c svchost.exe 0 0 0
3434 SgrmBroker.exe 0 0 0
17a0 svchost.exe 0 0 0
1a64 svchost.exe 0 0 0
3630 SUUserModeWorker.exe 1 0 5 below normal C:\Program Files\Samsung\
SamsungUpdate
31fc SUEngine.exe 1 0 0
31c4 conhost.exe 1 0 0
0a88 SearchApp.exe 1 2 53 normal C:\Windows\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy
1028 Video.UI.exe 1 0 8 normal C:\Program Files\
WindowsApps\Microsoft.ZuneVideo_10.22091.10031.0_x64__8wekyb3d8bbwe
1cd0 GameBar.exe 1 0 9 normal C:\Program Files\
WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe
3174 GameBarFTServer.exe 1 0 4 normal C:\Program Files\
WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe
2af8 RuntimeBroker.exe 1 0 1 normal C:\Windows\System32
0338 svchost.exe 0 0 0
0938 RuntimeBroker.exe 1 0 1 normal C:\Windows\System32
2724 svchost.exe 0 0 0
0964 svchost.exe 0 0 0
31a4 SearchProtocolHost.exe 1 0 1 idle C:\Windows\System32
0b50 SearchFilterHost.exe 0 0 0 idle C:\Windows\System32
2068 msedge.exe 1 2 48 normal C:\Program Files (x86)\
Microsoft\Edge\Application
08b4 msedge.exe 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
0b04 msedge.exe 1 1 7 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
1454 msedge.exe 1 0 4 normal C:\Program Files (x86)\
Microsoft\Edge\Application
1d60 msedge.exe 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2d88 msedge.exe 1 0 0 idle C:\Program Files (x86)\
Microsoft\Edge\Application
1730 msedge.exe 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
37f8 msedge.exe 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
0e5c identity_helper.exe 1 0 5 normal C:\Program Files (x86)\
Microsoft\Edge\Application\108.0.1462.54
28ac smartscreen.exe 1 0 4 normal C:\Windows\System32
1bc4 Launcher.exe 1 138 72 normal C:\Mu Arwen
0694 WmiPrvSE.exe 0 0 0
0570 audiodg.exe 0 0 0

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Fax
- Fila de Impressão da Raiz
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Intel(R) USB 3.1 eXtensible Host Controller - 1.10 (Microsoft)
- USB Composite Device
- USB Root Hub (USB 3.0)
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- PC ACPI de base x64
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- NT-256
- TOSHIBA MQ04ABF100
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel(R) UHD Graphics 620 (driver 27.20.100.8336)
+ {4d36e96a-e325-11ce-bfc1-08002be10318}
- Intel(R) 300 Series Chipset Family SATA AHCI Controller (driver 17.11.0.1000)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Teclado Padrão PS/2
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Realtek(R) Audio (driver 6.0.8899.1)
- Áudio Intel(R) para telas (driver 10.27.0.12)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Monitor Genérico PnP
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Mouse compatível com HID
- Mouse compatível com HID
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #2
- Qualcomm Atheros QCA9377 Wireless Network Adapter (driver 12.0.0.832)
- Realtek PCIe FE Family Controller (driver 10.42.526.2020)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Controlador de Espaços de Armazenamento da Microsoft
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Agregador do Processador ACPI
- Alarme de Ativação ACPI
- Barramento do Redirecionador de Dispositivos de Área de Trabalho Remota
- Botão de Recurso fixo ACPI
- Complexo da Raiz de PCI Express
- Controlador de interrupção programável
- controlador de áudio da tecnologia Intel(R) Smart Sound (driver 10.23.0.3349)
- desligar ACPI
- Driver de Arbitragem de Carregamento
- Driver de Infraestrutura de Virtualização Microsoft Hyper-V
- Driver de Renderização Básico da Microsoft
- Driver de Vídeo Básico da Microsoft
- Enumerador de Adaptador de Rede Virtual NDIS
- Enumerador de Barramento de Composição
- Enumerador de Barramento de Raiz UMBus
- Enumerador de Dispositivos de Software Plug and Play
- Enumerador de Unidade Virtual Microsoft
- Gerenciador de Volumes
- I/O LPC Controller - 9D84 for Intel(R) 300 Series Chipset Family On-Package
Platform Controller Hub (driver 10.1.15.6)
- Intel(R) Dynamic Tuning Manager (driver 8.6.10400.9366)
- Intel(R) Dynamic Tuning Processor Participant (driver 8.6.10400.9366)
 - Intel(R) Host Bridge/DRAM Registers - 3E34 (driver 10.1.14.7)
- Intel(R) Management Engine Interface (driver 1914.12.0.1256)
- Intel(R) PCI Express Root Port #10 - 9DB1 (driver 10.1.15.6)
- Intel(R) PCI Express Root Port #9 - 9DB0 (driver 10.1.15.6)
- Intel(R) Power Engine Plug-in
- Intel(R) Serial IO GPIO Host Controller - INT34BB (driver 30.100.1915.1)
- Intel(R) Serial IO I2C Host Controller - 9DE8 (driver 30.100.1915.1)
- Intel(R) SMBus - 9DA3 (driver 10.1.15.6)
- Intel(R) SPI (flash) Controller - 9DA4 (driver 10.1.15.6)
- Intel(R) Thermal Subsystem - 9DF9 (driver 10.1.15.6)
- Interface de Gerenciamento do Microsoft Windows para ACPI
- Interface de Gerenciamento do Microsoft Windows para ACPI
- Interface de Gerenciamento do Microsoft Windows para ACPI
- maxTouch I2C Boot Bridge Peripheral Driver (driver 10.1.14.10131)
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- PCI standard RAM Controller
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Recursos da placa-mãe
- Samsung System Event Controller (driver 1.0.0.5)
- Sistema Microsoft Compatível com UEFI
- Tampa ACPI
- tecnologia Intel(R) Smart Sound OED (driver 10.23.3349.230)
- Timer de eventos de alta precisão
- Timer do sistema
- Zona Térmica ACPI
- Zona Térmica ACPI
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
- Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Cópia de sombra de volume genérica
- Cópia de sombra de volume genérica
- Cópia de sombra de volume genérica
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Intel(R) Dynamic Application Loader Host Interface (driver 1.33.2019.512)
- Intel(R) Graphics Command Center (driver 27.20.100.8336)
- Intel(R) Graphics Control Panel (driver 27.20.100.8336)
- Intel(R) iCLS Client (driver 1.55.66.0)
- Intel(R) Management and Security Application Local Management (driver
2130.1.16.1)
- Realtek Audio Effects Component (driver 11.0.6000.754)
- Realtek Audio Universal Service (driver 1.0.0.240)
- Realtek Hardware Support Application (driver 11.0.6000.212)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- Microsoft Device Association Root Enumerator
 - Microsoft GS Wavetable Synth
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Wi-Fi
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Adaptador de CA da Microsoft
- Bateria de Método de Controle Compatível com ACPI da Microsoft
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- Dispositivo de Entrada USB
- Dispositivo definido pelo fornecedor compatível com HID
- Dispositivo HID I2C
- Microsoft Input Configuration Device
- Teclado sensível ao toque compatível com HID
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Alto-falantes (Realtek(R) Audio)
- Microfone (Realtek(R) Audio)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Web Camera
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
- Trusted Platform Module 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Enumerador Bluetooth da Microsoft
- Enumerador LE Bluetooth da Microsoft
- Qualcomm Atheros QCA9377 Bluetooth (driver 10.0.0.918)
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
- SAMSUNG ELECTRONICS System Firmware (driver 10.0.13.91)

cpu registers:
eax = 027fb8c0
ebx = ffffffff
ecx = 00000000
edx = 00bf37d0
esi = 02720380
edi = 0019fbc4
eip = 006e8115
esp = 0019faf8
ebp = 0019fb6c

stack dump:
0019faf8 15 81 6e 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..n.............
0019fb08 0c fb 19 00 15 81 6e 00 - c0 b8 7f 02 ff ff ff ff ......n.........
0019fb18 80 03 72 02 c4 fb 19 00 - 6c fb 19 00 28 fb 19 00 ..r.....l...(...
0019fb28 34 fb 19 00 30 a2 40 00 - 6c fb 19 00 40 fb 19 00 4...0.@.l...@...
0019fb38 30 a2 40 00 6c fb 19 00 - 78 fb 19 00 30 a2 40 00 0.@.l...x...0.@.
0019fb48 6c fb 19 00 c4 fb 19 00 - 80 03 72 02 ff ff ff ff l.........r.....
0019fb58 00 00 00 00 00 00 00 00 - 00 00 01 01 08 31 7e 02 .............1~.
0019fb68 20 d0 7d 02 a4 fb 19 00 - 54 85 6e 00 a4 fb 19 00 .}.....T.n.....
0019fb78 ac fb 19 00 30 a2 40 00 - a4 fb 19 00 80 03 72 02 ....0.@.......r.
0019fb88 08 31 7e 02 00 00 00 00 - 00 00 00 00 84 fb 19 00 .1~.............
0019fb98 94 01 00 00 ff ff ff ff - e8 2c 7e 02 ec fb 19 00 .........,~.....
0019fba8 95 8a 6e 00 b8 fb 19 00 - 30 a2 40 00 ec fb 19 00 ..n.....0.@.....
0019fbb8 04 fc 19 00 30 a2 40 00 - ec fb 19 00 00 00 00 00 ....0.@.........
0019fbc8 08 31 7e 02 40 30 6e 00 - 00 00 00 00 00 00 00 00 .1~.@0n.........
0019fbd8 00 00 00 00 00 00 00 00 - 00 00 00 00 f0 64 7b 02 .............d{.
0019fbe8 00 00 00 00 20 fc 19 00 - 8f 88 6e 00 ff ff ff ff .... .....n.....
0019fbf8 c4 fb 19 00 08 31 7e 02 - 00 00 00 00 30 fc 19 00 .....1~.....0...
0019fc08 30 a2 40 00 20 fc 19 00 - 00 00 00 00 08 31 7e 02 0.@. ........1~.
0019fc18 f0 64 7b 02 00 00 00 00 - 48 fc 19 00 09 3d 6e 00 .d{.....H....=n.
0019fc28 ff ff ff ff 10 fc 19 00 - 50 fc 19 00 30 a2 40 00 ........P...0.@.

disassembling:
[...]
00707ecf call -$2b5d3c ($452198) ; System.SysUtils.Format
00707ed4 mov edx, [ebp-8]
00707ed7 mov eax, [$732ab0]
00707edc mov eax, [eax+$3ec]
00707ee2 mov ecx, [ebp-4]
00707ee5 > call -$24216 ($6e3cd4) ; IdHTTP.TIdCustomHTTP.Get
00707eea xor eax, eax
00707eec pop edx
00707eed pop ecx
00707eee pop ecx
00707eef mov fs:[eax], edx
[...]