date/time : 2021-08-24, 12:55:40, 17ms

computer name : ADMIN

user name : Admin
operating system : Windows 10 x64 build 16299
system language : English
system up time : 5 hours 49 minutes
program up time : 2 hours 20 minutes
processors : 4x Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
physical memory : 677/3977 MB (free/total)
free disk space : (C:) 56.31 GB
display mode : 1536x864, 32 bit
process id : $1788
allocated memory : 457.08 MB
largest free block : 131025.94 GB
command line : "C:\Program Files\Bentley\Geotechnical\PLAXIS 3D CONNECT
Edition V20\Plaxis3DInput.exe" "D:\NAM 2021\CONG TRINH\36. NGUYEN KIM- DA LAT\NK-
3D\vd1.p3d"
executable : Plaxis3DInput.exe
exec. date/time : 2019-07-19 15:58
version : 20.0.0.119
compiled with : Delphi 10.3 Rio
madExcept version : 5.0.0
callstack crc : $7499b838, $8b3ff3bc, $54aeef66
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 000000000150450E in module
'Plaxis3DInput.exe'. Read of address 0000000000000008.

main thread ($54c):

0150450e +04e Plaxis3DInput.exe ParametricGeometryTools 1350 +4
TParametricRealTimeSnapper.CalculateSnapPoint
02156254 +174 Plaxis3DInput.exe ViewerPanel3D 1893 +11
TViewerPanel3D.GetNearbyInformation_Parametric
021559da +14a Plaxis3DInput.exe ViewerPanel3D 1792 +14
TViewerPanel3D.GetNearbyInformation_Parametric_Granulized
02155855 +045 Plaxis3DInput.exe ViewerPanel3D 1756 +7
TViewerPanel3D.GetNearbyInformation
01edadfa +05a Plaxis3DInput.exe Tool_Viewer 572 +5
TTool_Viewer.ScreenToWorld
01edffde +01e Plaxis3DInput.exe Tool_Coord 68 +1
TTool_Coord.GetPosition
01ee01e0 +130 Plaxis3DInput.exe Tool_Coord 118 +18
TTool_Coord.HandleMouseMove
025247ef +00f Plaxis3DInput.exe RubberBandTool 404 +1
TRubberBandTool.HandleMouseMove
0253f332 +0e2 Plaxis3DInput.exe ToolControllerModule 1827 +23
TToolController.HandleMouseMove
02157100 +030 Plaxis3DInput.exe ViewerPanel3D 2173 +4
TViewerPanel3D.HandleToolDispatchViewInfo
01ed6504 +024 Plaxis3DInput.exe ViewerToolData 194 +2
TViewerToolData.DispatchViewinfo
01eda5ee +08e Plaxis3DInput.exe Tool_Viewer 363 +21
TTool_Viewer.HandleShortliveKey
02540cfb +0ab Plaxis3DInput.exe ToolControllerModule 2542 +10
TToolController.ShortliveToolByKey
0253ef22 +0b2 Plaxis3DInput.exe ToolControllerModule 1709 +22
TToolController.HandleKeyPress
02166560 +2e0 Plaxis3DInput.exe WindowManager3D 556 +82
TWindowManager3D.HandleApplicationMessage
0084e06a +0ca Plaxis3DInput.exe Vcl.Forms
TApplication.ProcessMessage
0084e143 +013 Plaxis3DInput.exe Vcl.Forms
TApplication.HandleMessage
0084e591 +0e1 Plaxis3DInput.exe Vcl.Forms TApplication.Run
0294aa67 +357 Plaxis3DInput.exe Plaxis3DInput 1707 +54 initialization
7ffe9401 +00e KERNEL32.DLL
BaseThreadInitThunk
7ffe959e +01b ntdll.dll RtlUserThreadStart

thread $132c:
7ffe93ce +97 USER32.dll MsgWaitForMultipleObjectsEx
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1220:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $25a8:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1038:
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $94:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $b30:
7ffe93ce +97 USER32.dll MsgWaitForMultipleObjectsEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $23dc:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $938:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1e1c:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1a08:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart
thread $1dfc:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $22f0:
7ffe959f +c4 ntdll.dll
7ffe91fd +22 KERNELBASE.dll
7ffe9401 +0e KERNEL32.DLL
7ffe959e +1b ntdll.dll
RtlSleepConditionVariableCS
SleepConditionVariableCS
BaseThreadInitThunk
RtlUserThreadStart

thread $110:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1e74:
7ffe93ce +97 USER32.dll MsgWaitForMultipleObjectsEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $260c:
7ffe93ce +97 USER32.dll MsgWaitForMultipleObjectsEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $17d4:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $4b8:
7ffe959f +c4 ntdll.dll RtlSleepConditionVariableCS
7ffe91fd +22 KERNELBASE.dll SleepConditionVariableCS
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $12ec:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $212c:
7ffe91fb +100 KERNELBASE.dll
WaitForMultipleObjectsEx
7ffe91fb +009 KERNELBASE.dll
WaitForMultipleObjects
00ca6248 +088 Plaxis3DInput.exe Bentley.Str.Lic.UserConfigSynchronizer.Registry 312
+24 TRegistryKeyWatcherThread.Execute
00508bf4 +024 Plaxis3DInput.exe madExcept
HookedTThreadExecute
005e1a10 +040 Plaxis3DInput.exe System.Classes
ThreadProc
00413a0a +03a Plaxis3DInput.exe System
ThreadWrapper
00508ac9 +049 Plaxis3DInput.exe madExcept
ThreadExceptFrame
7ffe9401 +00e KERNEL32.DLL
BaseThreadInitThunk
7ffe959e +01b ntdll.dll
RtlUserThreadStart

thread $2138:
7ffe91fb +100 KERNELBASE.dll WaitForMultipleObjectsEx
7ffe9401 +00e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +01b ntdll.dll RtlUserThreadStart

thread $12d4: <priority:2>

7ffe91fb +100 KERNELBASE.dll WaitForMultipleObjectsEx
7ffe9401 +00e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +01b ntdll.dll RtlUserThreadStart

thread $174c:
7ffe91fb +94 KERNELBASE.dll SleepEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $320: <priority:-2>

7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $830:
7ffe91fb +94 KERNELBASE.dll SleepEx
005e2e04 +04 Plaxis3DInput.exe System.Classes TThread.Sleep
01aac991 +d1 Plaxis3DInput.exe AppStartHandler 569 +19
TManualBugreportThread.Execute
00508bf4 +24 Plaxis3DInput.exe madExcept HookedTThreadExecute
005e1a10 +40 Plaxis3DInput.exe System.Classes ThreadProc
00413a0a +3a Plaxis3DInput.exe System ThreadWrapper
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $2418:
7ffe93ce +97 USER32.dll MsgWaitForMultipleObjectsEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $17a4:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $23e0:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $20d0:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
01838e1f +1f Plaxis3DInput.exe VirtualTrees 6180 +3 TWorkerThread.Execute
00508bf4 +24 Plaxis3DInput.exe madExcept HookedTThreadExecute
005e1a10 +40 Plaxis3DInput.exe System.Classes ThreadProc
00413a0a +3a Plaxis3DInput.exe System ThreadWrapper
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $ce8:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $b88:
7ffe93ce +20 USER32.dll GetMessageW
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $6e0:
7ffe91fb +100 KERNELBASE.dll WaitForMultipleObjectsEx
7ffe91fb +009 KERNELBASE.dll WaitForMultipleObjects
7ffe9401 +00e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +01b ntdll.dll RtlUserThreadStart

thread $c44:
7ffe91fb +100 KERNELBASE.dll WaitForMultipleObjectsEx
7ffe9401 +00e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +01b ntdll.dll RtlUserThreadStart

thread $24cc:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $f14:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $e8c:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
00508ac9 +49 Plaxis3DInput.exe madExcept ThreadExceptFrame
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $2084: <priority:1>

7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $139c:
7ffe91fa +99 KERNELBASE.dll WaitForSingleObjectEx
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $1338:
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

thread $d84:
7ffe91fc +48 KERNELBASE.dll GetQueuedCompletionStatus
7ffe9401 +0e KERNEL32.DLL BaseThreadInitThunk
7ffe959e +1b ntdll.dll RtlUserThreadStart

modules:
00400000 Plaxis3DInput.exe 20.0.0.119 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
0c620000 WINTRUST.dll 10.0.16299.936
C:\Windows\System32
0f000000 detoured.dll C:\Program
Files\NVIDIA Corporation\CoProcManager
417a0000 libblas.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
45060000 office.odf 14.0.4738.1000 C:\Program
Files\Common Files\microsoft shared\OFFICE14\Cultures
45470000 GrooveIntlResource.dll 14.0.4761.1000 C:\Program
Files\Microsoft Office\Office14\1033
49730000 svml_dispmd.dll 14.0.0.3 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
66590000 nvoglv64.DLL 10.18.13.5850
C:\Windows\SYSTEM32
68250000 ATL90.DLL 9.0.30729.6161
C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1
fd3a3a768b895
68280000 MSVCR90.dll 9.0.30729.9317
C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9317_none_08e
0939fa840d57b
68330000 MSVCP90.dll 9.0.30729.9317
C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9317_none_08e
0939fa840d57b
6cec0000 libgcc_s_sjlj-1.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
6cf00000 libquadmath-0.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
6d200000 liblapack.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
6f600000 libgfortran-3.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
18000000 security.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe3673 libmmd.dll 19.0.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe36b5 plxmesher.dll 20.0.0.119 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
7ffe3d6c plxutils.dll 20.0.0.119 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher
7ffe4d93 SciLexer64.dll 3.5.2.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe4da9 TKACIS.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe4dc6 TKSTEPBase.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe4ddf TKShHealing.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe4e06 TKGeomAlgo.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe4e3f TKSTEP.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe4e68 libcef.dll 3.2454.1344.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\cef
7ffe543e TKDXF.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5459 TKBool.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5493 TKGeomBase.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5abf TKXSBase.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5cb5 TKHLR.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5cd7 TKOffset.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5d35 freetype.dll C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5d3f TKBO.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5d82 TKSTEPAttr.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5d8d TKTopAlgo.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5db0 TKMath.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe5f89 TKernel.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe6380 nvwgf2umx.dll 10.18.13.5850
C:\Windows\system32
7ffe64b8 TKG3d.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe64c5 OCCWrapper.dll 20.0.0.119 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe66ec d3d9.dll 10.0.16299.98
C:\Windows\SYSTEM32
7ffe678b bentley.entliclib.dll 11.0.3.11 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe679f libglesv2.dll 2.1.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\cef
7ffe6808 TKSTEP209.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe683d TKBRep.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe6a4a tbbmalloc.dll 2019.0.2018.1010 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe6b2a atlthunk.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe6f5d DevDispItemProvider.dll 10.0.16299.15
C:\Windows\System32
7ffe707f AcSignCore16.dll 23.0.46.0 C:\Program
Files\Common Files\Autodesk Shared
7ffe708a cscui.dll 10.0.16299.248
C:\Windows\System32
7ffe70ae GROOVEEX.DLL 14.0.4761.1000 C:\Program
Files\Microsoft Office\Office14
7ffe7117 EhStorShell.dll 10.0.16299.15
C:\Windows\System32
7ffe711c mfc140u.dll 14.24.28127.4
C:\Windows\SYSTEM32
7ffe717b AcSignIcon.dll 23.0.46.0
C:\Windows\SYSTEM32
7ffe71a0 NetworkExplorer.dll 10.0.16299.15
C:\Windows\system32
7ffe71b3 FileSyncShell64.dll 21.150.725.1
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.150.0725.0001
7ffe71ca ProjectShareOverlay.dll 10.0.13.17 C:\Program
Files\Common Files\Bentley Shared\CONNECTION Client
7ffe71dc IDMShellExt64.dll 6.32.12.24 C:\Program Files
(x86)\Internet Download Manager
7ffe734d LINKINFO.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe7376 ntshrui.dll 10.0.16299.402
C:\Windows\SYSTEM32
7ffe7414 edputil.dll 10.0.16299.248
C:\Windows\SYSTEM32
7ffe7419 thumbcache.dll 10.0.16299.15
C:\Windows\System32
7ffe741f CLDAPI.dll 10.0.16299.1004
C:\Windows\SYSTEM32
7ffe7421 explorerframe.dll 10.0.16299.492
C:\Windows\system32
7ffe746b dataexchange.dll 10.0.16299.15
C:\Windows\system32
7ffe7552 twinapi.dll 10.0.16299.248
C:\Windows\System32
7ffe7755 mscms.dll 10.0.16299.334
C:\Windows\SYSTEM32
7ffe7850 tbb.dll 2019.0.2018.1010 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe7872 dlnashext.dll 10.0.16299.15
C:\Windows\System32
7ffe787f TKMesh.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe7a5f System.Runtime.Serialization.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\59a4984a6afe6b2
09eaaa379927ab81d
7ffe7a9a StructuredQuery.dll 7.0.16299.1004
C:\Windows\System32
7ffe7af3 MSVCP140.dll 14.16.27012.6 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe7b09 WININET.dll 11.0.16299.1029
C:\Windows\SYSTEM32
7ffe7b54 audioses.dll 10.0.16299.1004
C:\Windows\system32
7ffe7b7c AEPIC.dll 10.0.17763.1016
C:\Windows\SYSTEM32
7ffe7b84 System.Xml.ni.dll 4.8.3761.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\5ee35debfc22f727e70e4479d
dcbc045
7ffe7c1c System.Configuration.ni.dll 4.8.3761.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\4beb1eeca20b27d
4bd1bb9880f03cc2a
7ffe7c31 TKPrim.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe7c36 FLTLIB.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe7c37 System.ServiceModel.Internals.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\242114c084a281d
a5742562e45a84318
7ffe7c4b OpenGL32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe7c5d DUI70.dll 10.0.16299.15
C:\Windows\system32
7ffe7c92 SMDiagnostics.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\70ae0bf90b6cf255af2473
7f51bb5cf0
7ffe7cc3 System.ServiceModel.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\3b9cf8abf6d42fe6
2158f8da994ecc20
7ffe7e56 System.Core.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\0d59b0e237d7519417de10cd
84bda4e7
7ffe7f90 SECUR32.DLL 10.0.16299.461
C:\Windows\SYSTEM32
7ffe7f97 netapi32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe7fd0 System.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\System\e43dd9c73ab5615e461bf5109c3fa
cd6
7ffe80af COMCTL32.dll 6.10.16299.1087
C:\Windows\WinSxS\amd64_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.16299.1087_none_0f9074b65a6589b7
7ffe8105 dwrite.dll 10.0.16299.755
C:\Windows\SYSTEM32
7ffe815f tiptsf.dll 10.0.16299.967 C:\Program
Files\Common Files\microsoft shared\ink
7ffe816a clrjit.dll 4.8.3928.0
C:\Windows\Microsoft.NET\Framework64\v4.0.30319
7ffe8180 cscapi.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe818c igd10umd64.dll 9.17.10.4459
C:\Windows\system32
7ffe8266 nvumdshimx.dll 10.18.13.5850
C:\Windows\SYSTEM32
7ffe826f MPR.dll 10.0.16299.1059
C:\Windows\SYSTEM32
7ffe827b dbgcore.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8283 mscorlib.ni.dll 4.8.3928.0
C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fe2524177eb3088c77be6667220
39f52
7ffe83e9 srvcli.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8446 dbghelp.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe84c1 OneCoreUAPCommonProxyStub.dll 10.0.16299.1004
C:\Windows\System32
7ffe8551 ucrtbase_clr0400.dll 14.10.25028.0
C:\Windows\SYSTEM32
7ffe855e VCRUNTIME140_CLR0400.dll 14.10.25028.0
C:\Windows\SYSTEM32
7ffe857c clr.dll 4.8.3928.0
C:\Windows\Microsoft.NET\Framework64\v4.0.30319
7ffe86de mscoreei.dll 4.8.3761.0
C:\Windows\Microsoft.NET\Framework64\v4.0.30319
7ffe86e9 gdiplus.dll 10.0.16299.1087
C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.16299.1087_n
one_407b679bb4f80385
7ffe871f oleacc.dll 7.2.16299.15
C:\Windows\SYSTEM32
7ffe8726 uiautomationcore.dll 7.2.16299.1004
C:\Windows\System32
7ffe8747 WindowsCodecs.dll 10.0.16299.726
C:\Windows\SYSTEM32
7ffe8762 winspool.drv 10.0.16299.1029
C:\Windows\SYSTEM32
7ffe8894 msimg32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8966 CoreUIComponents.dll 10.0.16299.1004
C:\Windows\System32
7ffe89c2 TextInputFramework.dll 10.0.16299.334
C:\Windows\System32
7ffe8a92 nvdxgiwrapx.dll 10.18.13.5850 C:\Program
Files\NVIDIA Corporation\CoProcManager
7ffe8a9c nvd3d9wrapx.dll 10.18.13.5850 C:\Program
Files\NVIDIA Corporation\CoProcManager
7ffe8aa0 wsock32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8aab DUser.dll 10.0.16299.15
C:\Windows\system32
7ffe8ad3 rasadhlp.dll 10.0.16299.15
C:\Windows\System32
7ffe8ad6 iertutil.dll 11.0.16299.1059
C:\Windows\SYSTEM32
7ffe8b13 urlmon.dll 11.0.16299.1029
C:\Windows\SYSTEM32
7ffe8b78 TKService.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe8b7b TKG2d.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe8b81 Bentley.Str.Lic.Native.dll 1.0.10.3 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe8b96 FaultRep.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8bc1 TKOCCLicense.dll 7.2.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\mesher\occ
7ffe8bc2 Bentley.Str.Lic.Core.dll 1.0.10.3 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe8bcf fwpuclnt.dll 10.0.16299.15
C:\Windows\System32
7ffe8be0 WINHTTP.dll 10.0.16299.1004
C:\Windows\SYSTEM32
7ffe8c04 winmmbase.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8c0a winmm.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8c47 dhcpcsvc6.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8c49 mscoree.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8c5c dhcpcsvc.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8c64 msvcp110_win.dll 10.0.16299.371
C:\Windows\SYSTEM32
7ffe8c6d policymanager.dll 10.0.16299.522
C:\Windows\SYSTEM32
7ffe8c7a PROPSYS.dll 7.0.16299.1004
C:\Windows\system32
7ffe8c96 WINNSI.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8cc6 SAMLIB.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8ccb MMDevAPI.DLL 10.0.16299.15
C:\Windows\system32
7ffe8d91 Bentley.Str.Lic.Connect.dll 1.0.10.3 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe8dcc samcli.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8ddb VCRUNTIME140.dll 14.16.27012.6 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe8dde IdnDL.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8de5 AVRT.dll 10.0.16299.15
C:\Windows\system32
7ffe8deb wkscli.dll 10.0.16299.15
C:\Windows\System32
7ffe8e22 StructuralLicensingCWrapper.dll 20.0.0.119 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
7ffe8e23 libegl.dll 2.1.0.0 C:\Program
Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20\cef
7ffe8e4f wtsapi32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8e58 USP10.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8e5e GLU32.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8e75 wintypes.dll 10.0.16299.785
C:\Windows\SYSTEM32
7ffe8eb8 NLAapi.dll 10.0.16299.248
C:\Windows\system32
7ffe8ebf SHFolder.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe8ec9 DAVHLPR.dll 10.0.16299.15
C:\Windows\System32
7ffe8eca davclnt.dll 10.0.16299.334
C:\Windows\System32
7ffe8ecc ntlanman.dll 10.0.16299.1059
C:\Windows\System32
7ffe8ece drprov.dll 10.0.16299.15
C:\Windows\System32
7ffe8ed5 D3DCompiler_47.dll 10.0.16299.1004
C:\Windows\SYSTEM32
7ffe8f18 d3d11.dll 10.0.16299.492
C:\Windows\SYSTEM32
7ffe8fa3 CoreMessaging.dll 10.0.16299.1004
C:\Windows\System32
7ffe8fb1 dcomp.dll 10.0.16299.15
C:\Windows\system32
7ffe9007 apphelp.dll 10.0.16299.98
C:\Windows\SYSTEM32
7ffe9034 uxtheme.dll 10.0.16299.755
C:\Windows\system32
7ffe9043 dwmapi.dll 10.0.16299.15
C:\Windows\system32
7ffe9052 RMCLIENT.dll 10.0.16299.371
C:\Windows\system32
7ffe905b twinapi.appcore.dll 10.0.16299.1004
C:\Windows\system32
7ffe90ae dxgi.dll 10.0.16299.98
C:\Windows\SYSTEM32
7ffe90d6 wldp.dll 10.0.16299.936
C:\Windows\SYSTEM32
7ffe90db ntmarta.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe910b rsaenh.dll 10.0.16299.637
C:\Windows\system32
7ffe9124 IPHLPAPI.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe9128 DNSAPI.dll 10.0.16299.547
C:\Windows\SYSTEM32
7ffe9134 NETUTILS.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe914b mswsock.dll 10.0.16299.15
C:\Windows\system32
7ffe9167 CRYPTSP.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe9169 CRYPTBASE.DLL 10.0.16299.15
C:\Windows\SYSTEM32
7ffe9178 bcrypt.dll 10.0.16299.492
C:\Windows\SYSTEM32
7ffe91a3 DEVOBJ.dll 10.0.16299.15
C:\Windows\system32
7ffe91a8 WINSTA.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe91ae version.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe91af sxs.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe91b9 nvinitx.dll 10.18.13.5850
C:\Windows\system32
7ffe91bd USERENV.dll 10.0.16299.15
C:\Windows\SYSTEM32
7ffe91c0 SSPICLI.DLL 10.0.16299.755
C:\Windows\SYSTEM32
7ffe91cd MSASN1.dll 10.0.16299.15
C:\Windows\System32
7ffe91cf powrprof.dll 10.0.16299.15
C:\Windows\System32
7ffe91d4 kernel.appcore.dll 10.0.16299.492
C:\Windows\System32
7ffe91d6 profapi.dll 10.0.16299.15
C:\Windows\System32
7ffe91d8 bcryptPrimitives.dll 10.0.16299.1004
C:\Windows\System32
7ffe91e0 cfgmgr32.dll 10.0.16299.15
C:\Windows\System32
7ffe91f6 KERNELBASE.dll 10.0.16299.1004
C:\Windows\System32
7ffe921d CRYPT32.dll 10.0.16299.402
C:\Windows\System32
7ffe923a gdi32full.dll 10.0.16299.1087
C:\Windows\System32
7ffe9254 msvcp_win.dll 10.0.16299.1059
C:\Windows\System32
7ffe925e ucrtbase.dll 10.0.16299.1059
C:\Windows\System32
7ffe926e windows.storage.dll 10.0.16299.1059
C:\Windows\System32
7ffe92e3 win32u.dll 10.0.16299.15
C:\Windows\System32
7ffe92e5 imagehlp.dll 10.0.16299.15
C:\Windows\System32
7ffe92e7 SETUPAPI.dll 10.0.16299.248
C:\Windows\System32
7ffe932c NSI.dll 10.0.16299.15
C:\Windows\System32
7ffe932d SHLWAPI.dll 10.0.16299.402
C:\Windows\System32
7ffe9333 combase.dll 10.0.16299.1004
C:\Windows\System32
7ffe9364 comdlg32.dll 10.0.16299.402
C:\Windows\System32
7ffe9375 advapi32.dll 10.0.16299.696
C:\Windows\System32
7ffe9380 oleaut32.dll 10.0.16299.1087
C:\Windows\System32
7ffe938d coml2.dll 10.0.16299.785
C:\Windows\System32
7ffe93af shcore.dll 10.0.16299.522
C:\Windows\System32
7ffe93ba RPCRT4.dll 10.0.16299.1029
C:\Windows\System32
7ffe93cc USER32.dll 10.0.16299.125
C:\Windows\System32
7ffe93e5 sechost.dll 10.0.16299.696
C:\Windows\System32
7ffe93eb ole32.dll 10.0.16299.1004
C:\Windows\System32
7ffe9400 KERNEL32.DLL 10.0.16299.1087
C:\Windows\System32
7ffe940b msvcrt.dll 7.0.16299.125
C:\Windows\System32
7ffe9415 GDI32.dll 10.0.16299.665
C:\Windows\System32
7ffe9418 WS2_32.dll 10.0.16299.15
C:\Windows\System32
7ffe941f PSAPI.DLL 10.0.16299.15
C:\Windows\System32
7ffe9426 Normaliz.dll 10.0.16299.15
C:\Windows\System32
7ffe9427 MSCTF.dll 10.0.16299.696
C:\Windows\System32
7ffe943e IMM32.DLL 10.0.16299.15
C:\Windows\System32
7ffe9441 clbcatq.dll 2001.12.10941.16384
C:\Windows\System32
7ffe9451 SHELL32.dll 10.0.16299.1004
C:\Windows\System32
7ffe9598 ntdll.dll 10.0.16299.936
C:\Windows\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
013c smss.exe 0 0 0
01b8 csrss.exe 0 0 0
021c wininit.exe 0 0 0
0224 csrss.exe 1 0 0
0288 winlogon.exe 1 0 0
02a0 services.exe 0 0 0
02bc lsass.exe 0 0 0
033c svchost.exe 0 0 0
0354 svchost.exe 0 0 0
036c fontdrvhost.exe 1 0 0
0370 fontdrvhost.exe 0 0 0
037c WUDFHost.exe 0 0 0
03f8 svchost.exe 0 0 0
0170 svchost.exe 0 0 0
02f4 dwm.exe 1 0 0
0420 svchost.exe 0 0 0
0464 svchost.exe 0 0 0
047c svchost.exe 0 0 0
048c svchost.exe 0 0 0
0528 svchost.exe 0 0 0
056c svchost.exe 0 0 0
0580 svchost.exe 0 0 0
05b4 WUDFHost.exe 0 0 0
05e0 svchost.exe 0 0 0
05e8 svchost.exe 0 0 0
0660 svchost.exe 0 0 0
066c svchost.exe 0 0 0
0688 svchost.exe 0 0 0
06ac svchost.exe 0 0 0
06b4 svchost.exe 0 0 0
06bc svchost.exe 0 0 0
0750 svchost.exe 0 0 0
07d0 svchost.exe 0 0 0
07ec svchost.exe 0 0 0
057c svchost.exe 0 0 0
07e0 svchost.exe 0 0 0
0518 svchost.exe 0 0 0
0880 svchost.exe 0 0 0
08b0 svchost.exe 0 0 0
08b8 svchost.exe 0 0 0
0944 svchost.exe 0 0 0
09b0 svchost.exe 0 0 0
09c8 svchost.exe 0 0 0
09d8 svchost.exe 0 0 0
09e0 svchost.exe 0 0 0
0a3c svchost.exe 0 0 0
0a78 spoolsv.exe 0 0 0
0ac0 svchost.exe 0 0 0
0b10 svchost.exe 0 0 0
0b18 svchost.exe 0 0 0
0b20 svchost.exe 0 0 0
0b28 svchost.exe 0 0 0
0b3c svchost.exe 0 0 0
0b50 svchost.exe 0 0 0
0b58 svchost.exe 0 0 0
0b60 svchost.exe 0 0 0
0b78 Bentley.Structural.PropertyCatalog.Server.exe 0 0 0
0b80 rpcnet.exe 0 0 0
0be4 svchost.exe 0 0 0
0bec FNPLicensingService64.exe 0 0 0
0bf4 AdAppMgrSvc.exe 0 0 0
0c34 svchost.exe 0 0 0
0c64 svchost.exe 0 0 0
0c94 dasHost.exe 0 0 0
0dac wlanext.exe 0 0 0
0dec conhost.exe 0 0 0
0e04 svchost.exe 0 0 0
13d0 sihost.exe 1 0 11 normal
C:\Windows\System32
13ec svchost.exe 1 0 1 normal
C:\Windows\System32
0184 svchost.exe 1 0 4 normal
C:\Windows\System32
0440 taskhostw.exe 1 8 6 normal
C:\Windows\System32
0914 svchost.exe 0 0 0
1404 svchost.exe 0 0 0
1484 svchost.exe 0 0 0
14ac ctfmon.exe 1 0 0
1538 svchost.exe 0 0 0
153c svchost.exe 0 0 0
1568 svchost.exe 0 0 0
161c svchost.exe 0 0 0
16c4 explorer.exe 1 480 421 normal
C:\Windows
17f0 ShellExperienceHost.exe 1 6 63 normal
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
18b0 SearchUI.exe 1 14 57 normal
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy
1920 RuntimeBroker.exe 1 36 3 normal
C:\Windows\System32
1960 RuntimeBroker.exe 1 36 4 normal
C:\Windows\System32
19f8 svchost.exe 0 0 0
1a28 svchost.exe 0 0 0
1e30 svchost.exe 0 0 0
1eb0 CNAB5RPD.EXE 0 0 0
0fe0 OSPPSVC.EXE 0 0 0
1cb8 igfxtray.exe 1 7 5 normal
C:\Windows\System32
1fe8 hkcmd.exe 1 0 17 normal
C:\Windows\System32
1c8c igfxpers.exe 1 0 4 normal
C:\Windows\System32
1e00 Apoint.exe 1 89 44 normal
C:\Program Files\DellTPad
1df8 CNAP3LAK.EXE 1 7 8 normal
C:\Windows\System32\spool\drivers\x64\3
1fcc svchost.exe 0 0 0
1d6c AAM Updates Notifier.exe 1 8 8 normal
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA
14e4 Bentley.Licensing.Service.exe 1 0 3 normal
C:\Program Files\Common Files\Bentley Shared\CONNECTION Client\LicenseService
2034 ApMsgFwd.exe 1 0 0
203c svchost.exe 0 0 0
20a8 hidfind.exe 1 0 3 normal
C:\Program Files\DellTPad
20bc ApntEx.exe 1 8 5 normal
C:\Program Files\DellTPad
20dc conhost.exe 1 15 11 normal
C:\Windows\System32
21a0 OneDrive.exe 1 107 68 normal
C:\Users\Admin\AppData\Local\Microsoft\OneDrive
2278 UniKeyNT.exe 1 13 14 normal
C:\Program Files\UniKey
2328 Zalo.exe 1 40 54 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
1efc Zalo.exe 1 5 2 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
2058 Zalo.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
2098 IDMan.exe 1 130 82 normal
C:\Program Files (x86)\Internet Download Manager
16f8 ZaloCap.exe 1 4 15 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1\plugins\capture
1710 Zalo.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
0308 Zalo.exe 1 0 1 idle
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
0730 Zalo.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
2018 Zalo.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1
2610 ZaviMeet.exe 1 7 14 normal
C:\Users\Admin\AppData\Local\Programs\Zalo\Zalo-21.7.1\plugins\capture
27b4 CNABJSWD.EXE 1 79 41 normal
C:\Windows\System32\spool\drivers\x64\3
2670 svchost.exe 0 0 0
24b4 SupportAssistAgent.exe 0 0 0
269c DDVRulesProcessor.exe 0 0 0
0814 Dsapi.exe 0 0 0
1fdc svchost.exe 1 0 1 normal
C:\Windows\System32
198c ServiceShell.exe 0 0 0
097c WmiPrvSE.exe 0 0 0
1a04 sedsvc.exe 0 0 0
1f40 DDVDataCollector.exe 0 0 0
24c4 DDVCollectorSvcApi.exe 0 0 0
18cc nvapiw.exe 1 0 4 normal
C:\Program Files\Dell\DellDataVault
0fac WmiPrvSE.exe 0 0 0
0b34 CCleaner64.exe 0 0 0
0a1c CCleaner64.exe 0 0 0
224c unsecapp.exe 0 0 0
1908 browser.exe 1 21 54 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
2578 browser.exe 1 0 3 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
2444 browser.exe 1 6 3 above normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
2528 browser.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
0c7c browser.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
0c3c RuntimeBroker.exe 1 40 5 normal
C:\Windows\System32
25f4 browser.exe 1 0 0 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
273c browser.exe 1 0 0 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
0510 browser.exe 1 0 0 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
1f3c browser.exe 1 0 0 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
1348 browser.exe 1 0 0 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
27c8 browser.exe 1 0 1 normal
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
0f2c svchost.exe 0 0 0
16e0 EXCEL.EXE 1 438 150 normal
C:\Program Files\Microsoft Office\Office14
21bc splwow64.exe 1 0 3 normal
C:\Windows
1a1c FoxitReader.exe 1 489 192 normal
C:\Program Files (x86)\Foxit Software\Foxit Reader
2134 WINWORD.EXE 1 268 104 normal
C:\Program Files\Microsoft Office\Office14
1060 explorer.exe 1 250 161 normal
C:\Windows
11dc FoxitReader.exe 1 521 209 normal
C:\Program Files (x86)\Foxit Software\Foxit Reader
20c8 FoxitReader.exe 1 484 192 normal
C:\Program Files (x86)\Foxit Software\Foxit Reader
06f8 browser.exe 1 0 0 idle
C:\Users\Admin\AppData\Local\CocCoc\Browser\Application
1298 dllhost.exe 1 0 3 normal
C:\Windows\System32
1788 Plaxis3DInput.exe 1 5108 795 normal
C:\Program Files\Bentley\Geotechnical\PLAXIS 3D CONNECT Edition V20
0f24 acad.exe 1 917 388 normal
C:\Program Files\Autodesk\AutoCAD 2019
096c acwebbrowser.exe 1 9 29 normal
C:\Program Files\Common Files\Autodesk Shared\CLM\V7\MSVC14\cliccore
14a4 acwebbrowser.exe 1 1 6 normal
C:\Program Files\Common Files\Autodesk Shared\CLM\V7\MSVC14\cliccore
0e00 AcWebBrowser.exe 1 13 31 normal
C:\Program Files\Autodesk\AutoCAD 2019\AcWebBrowser
05c4 AcWebBrowser.exe 1 3 8 normal
C:\Program Files\Autodesk\AutoCAD 2019\AcWebBrowser
0b44 acwebbrowser.exe 1 0 1 normal
C:\Program Files\Common Files\Autodesk Shared\CLM\V7\MSVC14\cliccore
0eec AcWebBrowser.exe 1 0 1 normal
C:\Program Files\Autodesk\AutoCAD 2019\AcWebBrowser
229c svchost.exe 0 0 0
2204 sedlauncher.exe 0 0 0
1358 conhost.exe 0 0 0
01b0 WmiPrvSE.exe 0 0 0
1c14 backgroundTaskHost.exe 1 0 9 normal
C:\Windows\System32
1570 audiodg.exe 0 0 0

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- \\DAUTHAU\Canon LBP3300
- \\DAUTHAU\Canon LBP8100
- \\phongdauthau\Canon LBP3300
- \\phongdauthau\Canon LBP8100
- \\Pkt\Canon LBP3300
 - \\Pkt\Canon LBP8100
- Fax
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- Nitro PDF Creator (Pro 12)
- Root Print Queue
- Send To OneNote 16
- Send To OneNote 2010
+ {36fc9e60-c465-11cf-8056-444553540000}
- Generic USB Hub
- Generic USB Hub
- Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller -
1C26 (driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller -
1C2D (driver 10.1.1.13)
- USB Composite Device
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- ACPI x64-based PC
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- KINGSTON SA400S37120G
- ST500LT012-1DG142
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel(R) HD Graphics 3000 (driver 9.17.10.4459)
- NVIDIA NVS 4200M (driver 10.18.13.5850)
+ {4d36e96a-e325-11ce-bfc1-08002be10318}
- Standard SATA AHCI Controller
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- HID Keyboard Device
- Standard PS/2 Keyboard
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- High Definition Audio Device
- High Definition Audio Device
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Generic PnP Monitor
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Dell Touchpad (driver 8.1206.101.112)
- HID-compliant mouse
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- DW1501 Wireless-N WLAN Half-Mini Card (driver 6.30.223.245)
- Intel(R) 82579LM Gigabit Network Connection
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e978-e325-11ce-bfc1-08002be10318}
- ECP Printer Port (LPT1)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Microsoft Storage Spaces Controller
- O2Micro Integrated MMC/SD controller (driver 2.2.2.1045)
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- 2nd generation Intel(R) Core(TM) processor family DRAM Controller - 0104
(driver 10.1.1.13)
- 2nd generation Intel(R) Core(TM) processor family PCI Express Controller - 0101
(driver 10.1.1.13)
- ACPI Fixed Feature Button
- ACPI Lid
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone
- Charge Arbitration Driver
- Composite Bus Enumerator
- Dell Data Vault Control Device (driver 2.0.5.0)
- Direct memory access controller
- High Definition Audio Controller
- High Definition Audio Controller
- High precision event timer
- Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 1 - 1C10
(driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 2 - 1C12
(driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 3 - 1C14
(driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 4 - 1C16
(driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 6 - 1C1A
(driver 10.1.1.13)
- Intel(R) 6 Series/C200 Series Chipset Family SMBus Controller - 1C22 (driver
10.1.1.13)
- Intel(R) Management Engine Interface (driver 11.0.0.1166)
- Intel(R) QM67 Express Chipset Family LPC Interface Controller - 1C4F (driver
10.1.1.13)
- Legacy device
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft Basic Display Driver
- Microsoft Basic Render Driver
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator
- Microsoft Windows Management Interface for ACPI
- Motherboard resources
- Motherboard resources
- NDIS Virtual Network Adapter Enumerator
- Numeric data processor
- PCI Express Root Complex
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Device Redirector Bus
- STMicroelectronics 3-Axis Digital Accelerometer (driver 2.2.2.10)
- System board
- System CMOS/real time clock
- System timer
- UMBus Root Bus Enumerator
- Volume Manager
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
- Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
- Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
 - Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
+ {50dd5230-ba8a-11d1-bf5d-0000f805f530}
- Microsoft Usbccid Smartcard Reader (WUDF)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Broadcom Corp Contacted SmartCard 0
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Passport Container Enumeration Bus
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Smart Card Device Enumeration Bus
- Wi-Fi
+ {6bdd1fc1-810f-11d0-bec7-08002be2092f}
- 1394 OHCI Compliant Host Controller
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft ACPI-Compliant Control Method Battery
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- HID-compliant consumer control device
- HID-compliant vendor-defined device
- HID-compliant vendor-defined device
- USB Input Device
- USB Input Device
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Microphone (2- High Definition Audio Device)
- Speakers (2- High Definition Audio Device)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {db4f6ddd-9c0e-45e4-9597-78dbbad0f412}
- Smart card filter driver
+ {e0def58b-33e8-4ff0-a75d-f20e1f68e5d7}
- DBUtilDrv2 Device (driver 2.7.0.0)
+ {eec5ad98-8080-425f-922a-dabf3de3f69a}
- New Volume
- New Volume

cpu registers:
rax = 00000000501667c0
rbx = 0000000036ef8080
rcx = 00000000501667c0
rdx = 0000000000000000
rsi = 0000000000000000
rdi = 000000000014f4d8
rip = 000000000150450e
rsp = 000000000014f3b0
rbp = 000000000014f3b0
r8 = 000000000014f4d8
r9 = 000000000014f4e0
r10 = 0000000000186a80
r11 = 00000000501667c0
r12 = 0000000000000000
r13 = 000000000014f4e0
r14 = 00000000000000dd
r15 = 0000000000000000

stack dump:
0014f3b0 30 00 00 00 00 00 00 00 - ff ff ff ff ff ff ff ff 0...............
0014f3c0 ff ff ff ff ff ff ff ff - f7 b6 cc 93 fe 7f 00 00 ................
0014f3d0 00 00 00 00 00 00 00 00 - 38 00 00 00 fe 7f 00 00 ........8.......
0014f3e0 88 f4 14 00 00 00 00 00 - 58 00 00 00 00 00 00 00 ........X.......
0014f3f0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0014f400 00 00 00 00 00 00 00 00 - a4 3d a2 95 fe 7f 00 00 .........=......
0014f410 20 8b 4e 7c fe 7f 00 00 - 00 00 00 00 00 00 00 00 .N|............
0014f420 00 f5 14 00 00 00 00 00 - e0 31 d4 93 fe 7f 00 00 .........1......
0014f430 68 f4 14 00 00 00 00 00 - 58 00 00 00 2f 00 00 00 h.......X.../...
0014f440 44 11 e3 92 fe 7f 00 00 - 50 00 00 00 2c 00 00 00 D.......P...,...
0014f450 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0014f460 00 00 00 00 00 00 00 00 - 20 8b 4e 7c fe 7f 00 00 ........ .N|....
0014f470 68 f5 14 00 00 00 00 00 - ef b1 cc 93 fe 7f 00 00 h...............
0014f480 b0 32 9f 06 00 00 00 00 - 20 8b 4e 7c fe 7f 00 00 .2...... .N|....
0014f490 3c 08 08 00 00 00 00 00 - 00 c8 3c 00 00 00 00 00 <.........<.....
0014f4a0 00 00 00 00 00 00 00 00 - 7e 01 e8 00 00 00 00 00 ........~.......
0014f4b0 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
0014f4c0 80 ff a1 95 fe 7f 00 00 - 76 3f ce 93 fe 7f 00 00 ........v?......
0014f4d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0014f4e0 00 02 00 00 00 00 00 00 - 3c 08 08 00 00 00 00 00 ........<.......

disassembling:
[...]
015044fa call -$107581f ($48ece0) ; System.SysUtils.Exception.Create
015044ff mov rcx, rax
01504502 call -$10f17e7 ($412d20) ; System.@RaiseExcept
01504507 1350 mov rax, [rbx+$18]
0150450b mov rcx, rax
0150450e > mov rdx, [rsi+8]
01504512 mov r8, rdi
01504515 mov r9, r13
01504518 lea r10, [r13+8]
0150451c mov [rsp+$20], r10
01504521 lea r10, [r13+$10]
[...]