date/time : 2023-05-07, 14:41:46, 95ms

computer name : DESKTOP-2MV7D60

user name : smc
operating system : Windows Vista build 9200
system language : French
system up time : 1 hour 21 minutes
program up time : 1 hour 2 minutes
processors : 2x Intel(R) Celeron(R) G4930 CPU @ 3.20GHz
physical memory : 1640/8069 MB (free/total)
free disk space : (C:) 23,86 GB (D:) 0 Bytes
display mode : 1366x768, 32 bit
process id : $10e8
allocated memory : 102,94 MB
executable : !ISRE1.EXE
exec. date/time : 2007-08-14 18:02
version : 11.0.0.164
madExcept version : 3.0b
callstack crc : $1d8d14e7, $14340e28, $164767b2
exception number : 1
exception message : The application seems to be frozen.

main thread ($10e4):

756010cc +00c win32u.dll NtUserWaitMessage
004fae05 +12d !ISRE1.EXE Forms 8104 +28 TApplication.Idle
004fa2bb +017 !ISRE1.EXE Forms 7689 +1 TApplication.HandleMessage
004fa4ce +096 !ISRE1.EXE Forms 7773 +16 TApplication.Run
00754f2f +3b3 !ISRE1.EXE Player 180 +82 initialization
767a0097 +017 KERNEL32.DLL BaseThreadInitThunk

thread $25c0 (TWorkerThread):

77152adc +0c ntdll.dll NtWaitForSingleObject
769a4593 +93 KERNELBASE.dll WaitForSingleObjectEx
769a44ed +0d KERNELBASE.dll WaitForSingleObject
00584526 +16 !ISRE1.EXE VirtualTrees 4652 +3 TWorkerThread.Execute
0044e26b +2b !ISRE1.EXE madExcept HookedTThreadExecute
00475d5c +34 !ISRE1.EXE Classes ThreadProc
004053d0 +28 !ISRE1.EXE System 2534 +0 ThreadWrapper
0044e14d +0d !ISRE1.EXE madExcept CallThreadProcSafe
0044e1b7 +37 !ISRE1.EXE madExcept ThreadExceptFrame
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($10e4) at:
005844b2 +16 !ISRE1.EXE VirtualTrees 4630 +1 TWorkerThread.Create

thread $2184: <priority:15>

7715306c +0c ntdll.dll NtWaitForMultipleObjects
0044e14d +0d !ISRE1.EXE madExcept CallThreadProcSafe
0044e1b7 +37 !ISRE1.EXE madExcept ThreadExceptFrame
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($10e4) at:
74473bd3 +00 winmm.dll

thread $1aa4:
771547fc +0c ntdll.dll NtWaitForWorkViaWorkerFactory
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk

thread $2718:
771547fc +0c ntdll.dll NtWaitForWorkViaWorkerFactory
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
thread $3888:
771547fc +0c ntdll.dll NtWaitForWorkViaWorkerFactory
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk

thread $25f8:
771547fc +0c ntdll.dll NtWaitForWorkViaWorkerFactory
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk

thread $3a98:
7715306c +0c ntdll.dll NtWaitForMultipleObjects
769ae6dd +fd KERNELBASE.dll WaitForMultipleObjectsEx
0044e14d +0d !ISRE1.EXE madExcept CallThreadProcSafe
0044e1b7 +37 !ISRE1.EXE madExcept ThreadExceptFrame
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by thread $366c at:
75f90ef1 +00 combase.dll

thread $23d0: <priority:-1>

7715306c +0c ntdll.dll NtWaitForMultipleObjects
769ae6dd +fd KERNELBASE.dll WaitForMultipleObjectsEx
76f56dbc +8c msvcrt.dll _endthreadex
0044e14d +0d !ISRE1.EXE madExcept CallThreadProcSafe
0044e1b7 +37 !ISRE1.EXE madExcept ThreadExceptFrame
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($10e4) at:
76f56caf +7f msvcrt.dll _beginthreadex

thread $780:
77152adc +0c ntdll.dll NtWaitForSingleObject
769a4593 +93 KERNELBASE.dll WaitForSingleObjectEx
769a44ed +0d KERNELBASE.dll WaitForSingleObject
76f56dbc +8c msvcrt.dll _endthreadex
0044e14d +0d !ISRE1.EXE madExcept CallThreadProcSafe
0044e1b7 +37 !ISRE1.EXE madExcept ThreadExceptFrame
767a0097 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($10e4) at:
76f56caf +7f msvcrt.dll _beginthreadex

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- AnyDesk Printer
- Envoyer � OneNote�2013
- Fax
- File d�attente d�impression racine
- Imprimante PDF Sage
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- Nitro PDF Creator
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Contr�leur h�te Intel(R) USB�3.0 eXtensible�-�1.0 (Microsoft)
- Hub USB racine (USB 3.0)
+ {4d36e965-e325-11ce-bfc1-08002be10318}
- DVD-ROM virtuel Microsoft
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- PC ACPI avec processeur x64
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- ASint AS528 128GB
+ {4d36e968-e325-11ce-bfc1-08002be10318}
 - Intel(R) UHD Graphics 610 (driver 31.0.101.2111)
+ {4d36e96a-e325-11ce-bfc1-08002be10318}
- Contr�leur AHCI SATA standard
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- P�riph�rique clavier IHM
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- P�riph�rique High Definition Audio
- Son Intel(R) pour �crans (driver 8.20.0.363)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Moniteur non Plug-and-Play g�n�rique
- Moniteur Plug-and-Play g�n�rique
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Souris IHM
- Souris IHM
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Microsoft Wi-Fi Direct Virtual Adapter #6
- Realtek PCIe GBE Family Controller (driver 8.43.1001.2015)
- TP-Link Wireless N PCI Express Adapter #2
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Contr�leur de bouclage VHD Microsoft
- Contr�leur des espaces de stockage Microsoft
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Agr�gation de processeurs ACPI
- Bouton d'alimentation ACPI
- Bouton de fonctionnalit� d�finie ACPI
- Bouton veille ACPI
- Bus redirecteur de p�riph�rique du Bureau � distance
- Compteur d'�v�nement de haute pr�cision
- Contr�leur d'interruptions programmable
- Contr�leur High Definition Audio
- Coprocesseur arithm�tique
- Gestionnaire de volumes
- Horloge syst�me
- Horloge syst�me CMOS/en temps r�el
- Intel 28F320C3 Flash Update Device Driver v6.4 (driver 6.4.0.0)
- Intel Device (driver 10.0.27.0)
- Intel Device (driver 10.0.27.0)
- Intel(R) Host Bridge/DRAM Registers - 3E0F (driver 10.1.14.8)
- Intel(R) Management Engine Interface #1 (driver 2131.1.4.0)
- Interface de gestion Microsoft Windows pour ACPI
- Interface de gestion Microsoft Windows pour ACPI
- Microsoft System Management BIOS Driver
- Pilote de rendu de base Microsoft
- Pilote d�affichage de base Microsoft
- Pilote d�infrastructure de virtualisation Microsoft Hyper-V
- Plug-in du moteur d�alimentation Intel(R)
- Pont ISA standard PCI
- Pont PCI vers PCI
- Pont PCI vers PCI
- Pont PCI vers PCI
- Pont PCI vers PCI
- Racine complexe PCI Express
- Ressources de la carte m�re
- Ressources de la carte m�re
- Ressources de la carte m�re
- Ressources de la carte m�re
- Ressources de la carte m�re
- Ressources de la carte m�re
- Ressources de la carte m�re
 - Ressources de la carte m�re
- Ressources de la carte m�re
- Syst�me compatible ACPI Microsoft
- Ventilateur ACPI
- Ventilateur ACPI
- Ventilateur ACPI
- Ventilateur ACPI
- Ventilateur ACPI
- Zone thermique ACPI
- Zone thermique ACPI
- �num�rateur de bus composite
- �num�rateur de bus racine UMBus
- �num�rateur de cartes r�seau virtuelles NDIS
- �num�rateur de lecteur virtuel Microsoft
- �num�rateur de p�riph�rique logiciel Plug-and-Play
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Celeron(R) G4930 CPU @ 3.20GHz
- Intel(R) Celeron(R) G4930 CPU @ 3.20GHz
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Intel(R) Dynamic Application Loader Host Interface (driver 1.41.2021.121)
- Intel(R) Graphics Command Center (driver 31.0.101.2111)
- Intel(R) Graphics Control Panel (driver 31.0.101.2111)
- Intel(R) iCLS Client (driver 1.63.1155.1)
- Intel(R) Management Engine WMI Provider (driver 2130.1.15.0)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Smart TV 8196
- Smart TV 8196
- Wi-Fi 3
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- P�riph�rique d�entr�e USB
- P�riph�rique d�entr�e USB
- P�riph�rique d�entr�e USB
- P�riph�rique fournisseur IHM
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Digital Output (Smart TV 8196)
+ {d421b08e-6d16-41ca-9c4d-9147e5ac98e0}
- Smart TV 8196

modules:
00400000 !ISRE1.EXE 11.0.0.164 D:
57a80000 mscoreei.dll 4.8.4180.0 C:\Windows\Microsoft.NET\
Framework\v4.0.30319
57b10000 mscoree.dll 6.2.19041.1 C:\Windows\System32
57b70000 itss.dll 6.2.19041.1 C:\Windows\System32
57c60000 l3codeca.acm 1.9.0.401 C:\Windows\System32
57c80000 AUDIOSES.DLL 6.2.19041.1741 C:\Windows\SYSTEM32
57dc0000 DDRAW.dll 6.2.19041.1 C:\Windows\SYSTEM32
57eb0000 hhctrl.ocx 6.2.19041.746 C:\Windows\SYSTEM32
57f50000 AcLayers.DLL 6.2.19041.2846 C:\Windows\SYSTEM32
61150000 msgsm32.acm 6.2.19041.1 C:\Windows\SYSTEM32
61160000 msg711.acm 6.2.19041.1 C:\Windows\SYSTEM32
61820000 msadp32.acm 6.2.19041.1 C:\Windows\SYSTEM32
66680000 sfc.dll 6.2.19041.2075 C:\Windows\SYSTEM32
680b0000 dxcore.dll 6.2.19041.546 C:\Windows\SYSTEM32
686b0000 DWrite.dll 6.2.19041.1566 C:\Windows\System32
688c0000 d2d1.dll 6.2.19041.546 C:\Windows\System32
68de0000 uiautomationcore.dll 7.2.19041.2788 C:\Windows\System32
69060000 jscript9.dll 11.0.19041.2673 C:\Windows\System32
69420000 MLANG.dll 6.2.19041.746 C:\Windows\SYSTEM32
69460000 InputHost.dll 6.2.19041.1741 C:\Windows\System32
69550000 WindowManagementAPI.dll C:\Windows\System32
695d0000 Windows.UI.dll 6.2.19041.746 C:\Windows\System32
696d0000 mshtml.dll 11.0.19041.2846 C:\Windows\System32
6a930000 msIso.dll 11.0.19041.2788 C:\Windows\SYSTEM32
6a980000 WindowsCodecs.dll 6.2.19041.1706 C:\Windows\SYSTEM32
6acd0000 twinapi.appcore.dll 6.2.19041.1865 C:\Windows\SYSTEM32
6ae60000 dxgi.dll 6.2.19041.2311 C:\Windows\SYSTEM32
6af30000 dcomp.dll 6.2.19041.2546 C:\Windows\system32
6b0a0000 d3d11.dll 6.2.19041.2075 C:\Windows\system32
6b280000 dataexchange.dll 6.2.19041.1387 C:\Windows\system32
6b2c0000 ieframe.dll 11.0.19041.2788 C:\Windows\System32
6bd90000 srpapi.dll 6.2.19041.2311 C:\Windows\System32
6bf70000 sxs.dll 6.2.19041.2788 C:\Windows\SYSTEM32
6c000000 msimtf.dll 6.2.19041.1 C:\Windows\system32
6c010000 imaadp32.acm 6.2.19041.1 C:\Windows\SYSTEM32
6c020000 resourcepolicyclient.dll 6.2.19041.546 C:\Windows\SYSTEM32
6c030000 wdmaud.drv 6.2.19041.1 C:\Windows\SYSTEM32
6c070000 olepro32.dll 6.2.19041.84 C:\Windows\SYSTEM32
6c090000 quartz.dll 6.2.19041.746 C:\Windows\SYSTEM32
6c230000 CoreMessaging.dll 6.2.19041.2193 C:\Windows\System32
6c2d0000 CoreUIComponents.dll 6.2.19041.546 C:\Windows\System32
6c550000 textinputframework.dll 6.2.19041.2546 C:\Windows\SYSTEM32
6c610000 TextShaping.dll C:\Windows\SYSTEM32
6c6b0000 msls31.dll 3.10.349.0 C:\Windows\System32
6c790000 midimap.dll 6.2.19041.488 C:\Windows\SYSTEM32
6c7a0000 msacm32.drv 6.2.19041.488 C:\Windows\SYSTEM32
6c7b0000 ksuser.dll 6.2.19041.1 C:\Windows\SYSTEM32
6c7c0000 MSVFW32.DLL 6.2.19041.1 C:\Windows\SYSTEM32
6ca50000 msacm32.dll 6.2.19041.1 C:\Windows\SYSTEM32
6ccf0000 DCIMAN32.DLL 6.2.19041.2075 C:\Windows\SYSTEM32
6cd00000 wsock32.dll 6.2.19041.1 C:\Windows\SYSTEM32
6ce70000 WKSCLI.DLL 6.2.19041.1645 C:\Windows\System32
6ce90000 AVRT.dll 6.2.19041.546 C:\Windows\SYSTEM32
6cf30000 MMDevAPI.DLL 6.2.19041.2075 C:\Windows\SYSTEM32
702d0000 apphelp.dll 6.2.19041.2546 C:\Windows\SYSTEM32
724e0000 NETAPI32.dll 6.2.19041.2130 C:\Windows\System32
72a20000 uxtheme.dll 6.2.19041.2193 C:\Windows\system32
72c30000 DEVOBJ.dll 6.2.19041.1620 C:\Windows\SYSTEM32
72c60000 sfc_os.DLL 6.2.19041.2311 C:\Windows\SYSTEM32
72da0000 wintypes.dll 6.2.19041.2788 C:\Windows\SYSTEM32
72e80000 virtdisk.dll 6.2.19041.2311 C:\Windows\SYSTEM32
72e90000 WINSPOOL.DRV 6.2.19041.2788 C:\Windows\SYSTEM32
72f20000 msimg32.dll 6.2.19041.1466 C:\Windows\SYSTEM32
72f30000 WINHTTP.dll 6.2.19041.2673 C:\Windows\System32
730a0000 netutils.dll 6.2.19041.1466 C:\Windows\SYSTEM32
730b0000 srvcli.dll 6.2.19041.1645 C:\Windows\SYSTEM32
730d0000 iertutil.dll 11.0.19041.2788 C:\Windows\SYSTEM32
73300000 URLMON.DLL 11.0.19041.2788 C:\Windows\SYSTEM32
734d0000 PROPSYS.dll 7.0.19041.1741 C:\Windows\System32
73650000 ntmarta.dll 6.2.19041.546 C:\Windows\SYSTEM32
736d0000 profapi.dll 6.2.19041.844 C:\Windows\SYSTEM32
736f0000 Wldp.dll 6.2.19041.2788 C:\Windows\SYSTEM32
73720000 windows.storage.dll 6.2.19041.2788 C:\Windows\SYSTEM32
73f90000 MSASN1.dll 6.2.19041.2251 C:\Windows\SYSTEM32
73fa0000 kernel.appcore.dll 6.2.19041.546 C:\Windows\SYSTEM32
73fb0000 UMPDC.dll C:\Windows\SYSTEM32
73fc0000 CRYPTBASE.DLL 6.2.19041.546 C:\Windows\SYSTEM32
73fd0000 SspiCli.dll 6.2.19041.2130 C:\Windows\SYSTEM32
74030000 winmmbase.dll 6.2.19041.1 C:\Windows\SYSTEM32
74050000 powrprof.dll 6.2.19041.546 C:\Windows\SYSTEM32
740a0000 FLTLIB.DLL 6.2.19041.546 C:\Windows\SYSTEM32
740b0000 DSound.dll 6.2.19041.2728 C:\Windows\SYSTEM32
743e0000 MPR.dll 6.2.19041.1806 C:\Windows\SYSTEM32
74470000 winmm.dll 6.2.19041.546 C:\Windows\SYSTEM32
74520000 wininet.dll 11.0.19041.2193 C:\Windows\SYSTEM32
74b50000 version.dll 6.2.19041.546 C:\Windows\SYSTEM32
74b60000 comctl32.dll 6.10.19041.1110 C:\Windows\WinSxS\
x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
74f40000 Secur32.dll 6.2.19041.546 C:\Windows\SYSTEM32
74f60000 USERENV.dll 6.2.19041.572 C:\Windows\System32
74f90000 GDI32.dll 6.2.19041.2130 C:\Windows\System32
74fc0000 advapi32.dll 6.2.19041.2130 C:\Windows\System32
75040000 SHELL32.dll 6.2.19041.2788 C:\Windows\System32
75600000 win32u.dll 6.2.19041.2846 C:\Windows\System32
757a0000 USER32.dll 6.2.19041.2846 C:\Windows\System32
75940000 SHLWAPI.dll 6.2.19041.2075 C:\Windows\System32
75990000 ole32.dll 6.2.19041.1202 C:\Windows\System32
75a80000 SETUPAPI.dll 6.2.19041.2193 C:\Windows\System32
75ec0000 IMM32.DLL 6.2.19041.2673 C:\Windows\System32
75f00000 combase.dll 6.2.19041.2788 C:\Windows\System32
76180000 coml2.dll 6.2.19041.546 C:\Windows\System32
761e0000 bcrypt.dll 6.2.19041.2486 C:\Windows\System32
76200000 CRYPT32.dll 6.2.19041.2486 C:\Windows\System32
76300000 gdi32full.dll 6.2.19041.2846 C:\Windows\System32
76400000 WINTRUST.dll 6.2.19041.2788 C:\Windows\System32
76450000 comdlg32.dll 6.2.19041.1806 C:\Windows\System32
76500000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32
76580000 sechost.dll 6.2.19041.2846 C:\Windows\System32
76600000 shcore.dll 6.2.19041.1645 C:\Windows\System32
76690000 WS2_32.dll 6.2.19041.546 C:\Windows\System32
76700000 msvcp_win.dll 6.2.19041.789 C:\Windows\System32
76780000 KERNEL32.DLL 6.2.19041.2788 C:\Windows\System32
76890000 KERNELBASE.dll 6.2.19041.2846 C:\Windows\System32
76ac0000 OLEAUT32.dll 6.2.19041.985 C:\Windows\System32
76b60000 cfgmgr32.dll 6.2.19041.1620 C:\Windows\System32
76ba0000 RPCRT4.dll 6.2.19041.2846 C:\Windows\System32
76cc0000 MSCTF.dll 6.2.19041.2673 C:\Windows\System32
76da0000 bcryptPrimitives.dll 6.2.19041.2486 C:\Windows\System32
76ef0000 msvcrt.dll 7.0.19041.546 C:\Windows\System32
76fb0000 ucrtbase.dll 6.2.19041.789 C:\Windows\System32
770e0000 ntdll.dll 6.2.19041.2788 C:\Windows\SYSTEM32

processes:
0000 Idle 0
0004 System 0
005c Registry 0
01d8 smss.exe 0
0250 csrss.exe 0
02a0 wininit.exe 0
02a8 csrss.exe 1
0300 winlogon.exe 1
0310 services.exe 0
0330 lsass.exe 0
03a4 svchost.exe 0
03b4 fontdrvhost.exe 0
03bc fontdrvhost.exe 1
0200 svchost.exe 0
0254 svchost.exe 0
0404 dwm.exe 1
04d8 svchost.exe 0
0530 svchost.exe 0
0538 svchost.exe 0
0540 svchost.exe 0
054c svchost.exe 0
057c IntelCpHDCPSvc.exe 0
058c svchost.exe 0
05c0 svchost.exe 0
0650 svchost.exe 0
065c svchost.exe 0
0664 svchost.exe 0
067c IntelCpHeciSvc.exe 0
06a8 svchost.exe 0
06d0 svchost.exe 0
06f0 igfxCUIService.exe 0
0768 svchost.exe 0
07b8 svchost.exe 0
032c wsc_proxy.exe 0
080c svchost.exe 0
0818 svchost.exe 0
0858 Memory Compression 0
0864 svchost.exe 0
08ec svchost.exe 0
08f4 svchost.exe 0
0930 svchost.exe 0
099c svchost.exe 0
09a0 svchost.exe 0
09ac svchost.exe 0
09d4 svchost.exe 0
09e4 svchost.exe 0
0ac0 svchost.exe 0
0b34 svchost.exe 0
0b50 svchost.exe 0
0b7c svchost.exe 0
0b90 svchost.exe 0
0bd0 AvastSvc.exe 0
0bfc svchost.exe 0
0c0c svchost.exe 0
0cb8 aswToolsSvc.exe 0
0d7c spoolsv.exe 0
0d8c svchost.exe 0
0ed8 svchost.exe 0
0f48 svchost.exe 0
0f68 dasHost.exe 0
0f98 aswEngSrv.exe 0
0fa0 svchost.exe 0
11c4 svchost.exe 0
11d0 svchost.exe 0
11d8 afwServ.exe 0
11e0 svchost.exe 0
1240 svchost.exe 0
12dc aakore.exe 0
12ec AA_v3 (2).exe 0
12f8 svchost.exe 0
1304 AnyDesk.exe 0
1310 schedul2.exe 0
1320 svchost.exe 0
1328 svchost.exe 0
1334 afcdpsrv.exe 0
1344 svchost.exe 0
134c TuneupSvc.exe 0
1374 anti_ransomware_service.exe 0
1388 GUBootService.exe 0
13a0 OneApp.IGCC.WinService.exe 0
0c60 jhi_service.exe 0
142c svchost.exe 0
143c rsDNSSvc.exe 0
1444 rsDNSClientSvc.exe 0
144c rsVPNClientSvc.exe 0
145c rsDNSResolver.exe 0
1470 sqlbrowser.exe 0
14a8 svchost.exe 0
14b0 sqlwriter.exe 0
14e0 rsVPNSvc.exe 0
14f8 svchost.exe 0
1520 svchost.exe 0
1528 sqlservr.exe 0
1560 svchost.exe 0
1570 svchost.exe 0
1578 WMIRegistrationService.exe 0
1588 MsDtsSrvr.exe 0
17fc svchost.exe 0
1868 AA_v3 (2).exe 1
1968 conhost.exe 0
1c08 bckp_amgr.exe 0
1c1c monitoring-mini.exe 0
1c30 mms_mini.exe 0
1cf8 adp-agent.exe 0
1d20 task-manager.exe 0
1e0c updater.exe 0
1f10 svchost.exe 0
1fd4 svchost.exe 0
21cc SQLAGENT.EXE 0
21e4 conhost.exe 0
23d8 sihost.exe 1 normal C:\Windows\System32
23e8 svchost.exe 1 normal C:\Windows\System32
2024 svchost.exe 1 normal C:\Windows\System32
210c taskhostw.exe 1 normal C:\Windows\System32
1420 PresentationFontCache.exe 0
140c svchost.exe 0
1100 svchost.exe 0
23c4 ctfmon.exe 1
2430 igfxEM.exe 1 normal C:\Windows\System32\DriverStore\
FileRepository\cui_dch.inf_amd64_38cfab2b652e4701
248c svchost.exe 0
25b4 explorer.exe 1 normal C:\Windows
2774 svchost.exe 1 normal C:\Windows\System32
2694 svchost.exe 0
178c StartMenuExperienceHost.exe 1 normal C:\Windows\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
1794 RuntimeBroker.exe 1 normal C:\Windows\System32
2804 SearchIndexer.exe 0
282c RuntimeBroker.exe 1 normal C:\Windows\System32
28a4 svchost.exe 0
2b78 TextInputHost.exe 1 normal C:\Windows\SystemApps\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
2aac dllhost.exe 1 normal C:\Windows\System32
0e44 ShellExperienceHost.exe 1 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
25a8 SecurityHealthService.exe 0
2c04 RuntimeBroker.exe 1 normal C:\Windows\System32
2c44 schedhlp.exe 1 normal C:\Program Files (x86)\Common
Files\Acronis\Schedule2
2d38 TuneupUI.exe 1 normal C:\Program Files\Avast Software\
Cleanup
2de0 OneDrive.exe 1 normal C:\Users\smc\AppData\Local\
Microsoft\OneDrive
2df8 EDICT.EXE 1 normal C:\Program Files (x86)\Microsoft
Encarta\Microsoft Encarta 2009 - Collection DVD
2e44 AvastUI.exe 1 normal C:\Program Files\Avast Software\
Avast
2f78 msedge.exe 1 normal C:\Program Files (x86)\Microsoft\
Edge\Application
2f98 msedge.exe 1 normal C:\Program Files (x86)\Microsoft\
Edge\Application
2ffc uTorrent.exe 1 normal C:\Users\smc\AppData\Roaming\
utorrent
03d4 msedge.exe 1 above normal C:\Program Files (x86)\Microsoft\
Edge\Application
2ddc msedge.exe 1 normal C:\Program Files (x86)\Microsoft\
Edge\Application
2a2c msedge.exe 1 normal C:\Program Files (x86)\Microsoft\
Edge\Application
0040 elements64.exe 1 normal C:\Users\smc\AppData\Local\Yandex\
Elements\elements.exe\8.14.0.1058
06a0 msedge.exe 1 idle C:\Program Files (x86)\Microsoft\
Edge\Application
0b8c msedge.exe 1 idle C:\Program Files (x86)\Microsoft\
Edge\Application
0c68 svchost.exe 0
1bf4 BrowserManager.exe 1 normal C:\Users\smc\AppData\Local\Yandex\
BrowserManager
26a8 Skype.exe 1 normal C:\Program Files (x86)\Microsoft\
Skype for Desktop
1208 utorrentie.exe 1 normal C:\Users\smc\AppData\Roaming\
utorrent\updates\3.6.0_46802
13d4 supercopier.exe 1 normal C:\Program Files (x86)\Supercopier
1544 utorrentie.exe 1 normal C:\Users\smc\AppData\Roaming\
utorrent\updates\3.6.0_46802
0a5c Skype.exe 1 normal C:\Program Files (x86)\Microsoft\
Skype for Desktop
3084 Skype.exe 1 above normal C:\Program Files (x86)\Microsoft\
Skype for Desktop
30a0 Skype.exe 1 normal C:\Program Files (x86)\Microsoft\
Skype for Desktop
3200 msedgewebview2.exe 1 normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
324c msedgewebview2.exe 1 normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
33cc msedgewebview2.exe 1 above normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
33d4 msedgewebview2.exe 1 normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
33dc msedgewebview2.exe 1 normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
1d64 msedgewebview2.exe 1 idle C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
2644 msedgewebview2.exe 1 normal C:\Program Files (x86)\Microsoft\
EdgeWebView\Application\112.0.1722.68
345c IGCCTray.exe 1 normal C:\Program Files\WindowsApps\
AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt\
GCP.ML.BackgroundSysTray
35d8 Cortana.exe 1 normal C:\Program Files\WindowsApps\
Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe
35e8 svchost.exe 0
36e4 TrueImageMonitor.exe 1 normal C:\Program Files (x86)\Acronis\
TrueImageHome
36f0 AnyDesk.exe 1 normal C:\Program Files (x86)\AnyDesk
377c tib_mounter_monitor.exe 1 normal C:\Program Files (x86)\Common
Files\Acronis\TibMounter
3448 mshta.exe 1 normal C:\Windows\SysWOW64
34c4 SearchApp.exe 1 normal C:\Windows\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy
2860 TuneupUI.exe 1 normal C:\Program Files\Avast Software\
Cleanup
23e0 RuntimeBroker.exe 1 normal C:\Windows\System32
2f2c ONENOTEM.EXE 1 normal C:\Program Files (x86)\Microsoft
Office\Office15
344c IGCC.exe 1 normal C:\Program Files\WindowsApps\
AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt
3750 svchost.exe 0
3920 svchost.exe 1 normal C:\Windows\System32
3bb4 svchost.exe 0
3514 grpm-mini.exe 0
3afc svchost.exe 0
073c SgrmBroker.exe 0
2d04 syncagentsrv.exe 0
06b0 svchost.exe 0
2b30 svchost.exe 1 normal C:\Windows\System32
02b4 ApplicationFrameHost.exe 1 normal C:\Windows\System32
0ef8 UserOOBEBroker.exe 1 normal C:\Windows\System32\oobe
2e9c svchost.exe 0
347c svchost.exe 1 normal C:\Windows\System32
1888 svchost.exe 1 normal C:\Windows\System32
0398 svchost.exe 0
3a80 dllhost.exe 1 normal C:\Windows\System32
36b0 dasHost.exe 0
1128 svchost.exe 0
29cc svchost.exe 0
3270 taskhostw.exe 1 normal C:\Windows\System32
2c78 svchost.exe 0
350c svchost.exe 0
0eb8 svchost.exe 0
2fa0 rundll32.exe 1
2d90 svchost.exe 0
18b4 audiodg.exe 0
2a8c AvastUI.exe 1 above normal C:\Program Files\Avast Software\
Avast
2630 AvastUI.exe 1 normal C:\Program Files\Avast Software\
Avast
003c RuntimeBroker.exe 1 normal C:\Windows\System32
0460 consent.exe 1
10e8 !ISRE1.EXE 1 normal D:
2074 WinPKG.exe 1
3388 WinPKG.exe 1
28b4 svchost.exe 0
2b48 WUDFHost.exe 0
2948 PhoneExperienceHost.exe 1 normal C:\Program Files\WindowsApps\
Microsoft.YourPhone_1.23032.186.0_x64__8wekyb3d8bbwe
339c TuneupUI.exe 1 normal C:\Program Files\Avast Software\
Cleanup
3c70 svchost.exe 0
16f8 svchost.exe 0
0568 WmiPrvSE.exe 0
3ae4 ielowutil.exe 1 normal C:\Program Files\Internet Explorer

disassembling:
[...]
004fadf7 test al, al
004fadf9 jz loc_4fadff
004fadfb 8103 mov byte ptr [ebp-5], 0
004fadff 8104 cmp byte ptr [ebp-5], 0
004fae03 jz loc_4fae0a
004fae05 > call -$f1c9e ($40916c) ; Windows.WaitMessage
004fae0a 8105 xor eax, eax
004fae0c pop edx
004fae0d pop ecx
004fae0e pop ecx
004fae0f mov fs:[eax], edx
[...]