EurekaLog 7.11.0.1 hotfix 1 58F9C43131A29342B630CB28173F7675 CC8A4467D1BEB140BD575657D9734BDC DA39A3EE5E6B4B0D3255BFEF95601890AFD80709 27DD60DB4AEE0E499B5A04FA4BAB79D4 Application: ------------------------------------------------------- 1.1 Start Date : Mon, 16 Jan 2023 11:42:47 +0100 1.2 Name/Description: kurs32.exe - (Kursverwaltung) 1.3 Version Number : 3.31.4.440 1.4 Parameters : 1.5 Compilation Date: Wed, 11 Jan 2023 11:19:11 +0100 1.6 Up Time : 3 minute(s), 5 second(s) Exception: ---------------------------------------------------------------------------------------------------------------- 2.1 Date : Mon, 16 Jan 2023 11:45:53 +0100 2.2 Address : 00A4D74E 2.3 Module Name : kurs32.exe - (Kursverwaltung) 2.4 Module Version: 3.31.4.440 2.5 Type : EAccessViolation 2.6 Message : Zugriffsverletzung bei Adresse 00A4D74E in Modul 'kurs32.exe'. Lesen von Adresse 0043004B. 2.7 ID : 05906A53 2.8 Count : 1 2.11 Sent : 0 User: -------------------------- 3.2 Name : administrator 3.3 Email: test@test.de Computer: --------------------- 5.9 Display DPI: 96 Steps to reproduce: ------------ 8.1 Text: Call Stack Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Methods |Details|Stack |Address |Module |Offset |Source |Unit |Class |Procedure/Method |Line | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=8616; Parent=0; Priority=0 | |Class=; Name=MAIN | |DeadLock=0; Wait Chain= | |Comment= | |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |7FFFFFFE|03 |00000000|00A4D74E|kurs32.exe |0000D74E|System.pas |System | |_UStrAsg | | |00000060|04 |02C1EDC8|018020EA|kurs32.exe |00DC20EA|uVersetzung.pas |uVersetzung |TKlassenDef |SetVers_Klasse |199[1] | |00000060|04 |02C1EDD8|01C344BF|kurs32.exe |011F44BF|frmVersetzungstabelle.pas|frmVersetzungstabelle|TVersTabDlg |StringGrid1SetEditText |124[6] | |00000060|03 |02C1EDEC|00EAD167|kurs32.exe |0046D167|Vcl.Grids.pas |Vcl.Grids |TCustomDrawGrid |SetEditText | | |00000060|03 |02C1EE00|00EAFAB2|kurs32.exe |0046FAB2|Vcl.Grids.pas |Vcl.Grids |TStringGrid |SetEditText | | |00000060|03 |02C1EE2C|00EAC407|kurs32.exe |0046C407|Vcl.Grids.pas |Vcl.Grids |TCustomGrid |UpdateText | | |00000060|03 |02C1EE50|00EAC1D0|kurs32.exe |0046C1D0|Vcl.Grids.pas |Vcl.Grids |TCustomGrid |HideEdit | | |00000060|03 |02C1EE68|00EA577B|kurs32.exe |0046577B|Vcl.Grids.pas |Vcl.Grids |TCustomGrid |HideEditor | | |00000020|03 |02C1EE6C|00EAAFD5|kurs32.exe |0046AFD5|Vcl.Grids.pas |Vcl.Grids |TCustomGrid |MouseDown | | |00000020|03 |02C1EF08|752124BA|win32u.dll |000024BA|win32u.dll |win32u | |NtUserGetKeyState | | |00000020|03 |02C1EF0C|74B07681|user32.dll |00017681|user32.dll |user32 | | (possible GetKeyState+145) | | |00000060|03 |02C1EF2C|00CD2A24|kurs32.exe |00292A24|Vcl.Controls.pas |Vcl.Controls |TControl |DoMouseDown | | |00000020|03 |02C1EF48|00CD0DCF|kurs32.exe |00290DCF|Vcl.Controls.pas |Vcl.Controls |TControl |SetMouseCapture | | |00000060|03 |02C1EF50|00CD2A73|kurs32.exe |00292A73|Vcl.Controls.pas |Vcl.Controls |TControl |WMLButtonDown | | |00000020|03 |02C1EF60|00EAC528|kurs32.exe |0046C528|Vcl.Grids.pas |Vcl.Grids |TCustomGrid |WMLButtonDown | | |00000020|03 |02C1EF68|00CD23E2|kurs32.exe |002923E2|Vcl.Controls.pas |Vcl.Controls |TControl |WndProc | | |00000020|03 |02C1EF88|00CD758D|kurs32.exe |0029758D|Vcl.Controls.pas |Vcl.Controls |TWinControl |WndProc | | |00000020|03 |02C1EFCC|00A4C298|kurs32.exe |0000C298|System.pas |System |TMonitor |TryEnter | | |00000020|03 |02C1EFD4|00A4BDC0|kurs32.exe |0000BDC0|System.pas |System |TMonitor |Enter | | |00000020|03 |02C1EFDC|00DEA619|kurs32.exe |003AA619|Vcl.Forms.pas |Vcl.Forms |TCustomForm |WndProc | | |00000020|03 |02C1EFE4|00A4BC28|kurs32.exe |0000BC28|System.pas |System |TMonitor |CheckOwningThread | | |00000020|03 |02C1EFEC|00A4BF4E|kurs32.exe |0000BF4E|System.pas |System |TMonitor |Exit | | |00000020|03 |02C1F000|00CAA1B9|kurs32.exe |0026A1B9|Vcl.Graphics.pas |Vcl.Graphics | |FreeMemoryContexts | | |00000020|03 |02C1F018|00CD6AAD|kurs32.exe |00296AAD|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000020|03 |02C1F028|775E164B|ntdll.dll |0004164B|ntdll.dll |ntdll | |RtlDeactivateActivationContextUnsafeFast | | |00000020|03 |02C1F034|00CD6C90|kurs32.exe |00296C90|Vcl.Controls.pas |Vcl.Controls |TWinControl |ControlAtPos | | |00000020|03 |02C1F040|00B7D3D8|kurs32.exe |0013D3D8|System.Classes.pas |System.Classes | |StdWndProc | | |00000020|03 |02C1F048|00CD6D4C|kurs32.exe |00296D4C|Vcl.Controls.pas |Vcl.Controls |TWinControl |IsControlMouseMsg | | |00000020|03 |02C1F058|74B1D2D1|user32.dll |0002D2D1|user32.dll |user32 | | (possible SetManipulationInputTarget+81)| | |00000060|03 |02C1F094|00CD758D|kurs32.exe |0029758D|Vcl.Controls.pas |Vcl.Controls |TWinControl |WndProc | | |00000020|03 |02C1F0A8|74AFD35E|user32.dll |0000D35E|user32.dll |user32 | | (possible DispatchMessageW+2398) | | |00000020|03 |02C1F0B8|7482D545|msctf.dll |0001D545|Msctf.dll |Msctf | | (possible TF_Notify+1909) | | |00000020|03 |02C1F0C8|7760EBBA|ntdll.dll |0006EBBA|ntdll.dll |ntdll | |ZwFindAtom | | |00000020|03 |02C1F0CC|745D461C|kernel32.dll|0001461C|KERNEL32.DLL |KERNEL32 | | (possible GlobalFindAtomW+204) | | |00000060|03 |02C1F0E0|00CD6A98|kurs32.exe |00296A98|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000020|03 |02C1F0F4|00CD6AC4|kurs32.exe |00296AC4|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000060|03 |02C1F110|00B7D3D8|kurs32.exe |0013D3D8|System.Classes.pas |System.Classes | |StdWndProc | | |00000060|03 |02C1F128|74B1D2D1|user32.dll |0002D2D1|user32.dll |user32 | | (possible SetManipulationInputTarget+81)| | |00000060|03 |02C1F154|74AFD305|user32.dll |0000D305|user32.dll |user32 | | (possible DispatchMessageW+2309) | | |00000020|03 |02C1F17C|74B0741A|user32.dll |0001741A|user32.dll |user32 | | (possible CallNextHookEx+1050) | | |00000020|03 |02C1F19C|74B07439|user32.dll |00017439|user32.dll |user32 | | (possible CallNextHookEx+1081) | | |00000020|03 |02C1F1D4|74AFD196|user32.dll |0000D196|user32.dll |user32 | | (possible DispatchMessageW+1942) | | |00000060|03 |02C1F23C|74AFCC4F|user32.dll |0000CC4F|user32.dll |user32 | | (possible DispatchMessageW+591) | | |00000020|03 |02C1F27C|74AFC493|user32.dll |0000C493|user32.dll |user32 | |GetPropW | | |00000060|03 |02C1F2B0|74AFCA0B|user32.dll |0000CA0B|user32.dll |user32 | |DispatchMessageW | | |00000020|03 |02C1F2BC|00DF497F|kurs32.exe |003B497F|Vcl.Forms.pas |Vcl.Forms |TApplication |ProcessMessage | | |00000020|03 |02C1F2D8|00DF49C2|kurs32.exe |003B49C2|Vcl.Forms.pas |Vcl.Forms |TApplication |HandleMessage | | |00000020|03 |02C1F2FC|00DEFB46|kurs32.exe |003AFB46|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ShowModal | | |00000030|03 |02C1F304|00DEFBD5|kurs32.exe |003AFBD5|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ShowModal | | |00000030|03 |02C1F310|00DEFCAC|kurs32.exe |003AFCAC|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ShowModal | | |00000030|03 |02C1F31C|00DEFCD0|kurs32.exe |003AFCD0|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ShowModal | | |00000030|03 |02C1F328|00DEFCEF|kurs32.exe |003AFCEF|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ShowModal | | |00000020|04 |02C1F360|01C33E26|kurs32.exe |011F3E26|frmVersetzungstabelle.pas|frmVersetzungstabelle| |KlassentabelleBearbeiten |64[3] | |00000030|04 |02C1F368|01C33E42|kurs32.exe |011F3E42|frmVersetzungstabelle.pas|frmVersetzungstabelle| |KlassentabelleBearbeiten |66[5] | |00000020|04 |02C1F378|01E347C1|kurs32.exe |013F47C1|frmKursMain.pas |frmKursMain |TfrmMainForm |Versetzungstabelle1Click |3426[3] | |00000030|04 |02C1F380|01E34803|kurs32.exe |013F4803|frmKursMain.pas |frmKursMain |TfrmMainForm |Versetzungstabelle1Click |3434[11] | |00000020|03 |02C1F390|00B7C59F|kurs32.exe |0013C59F|System.Classes.pas |System.Classes |TBasicAction |Execute | | |00000020|03 |02C1F398|00CB4F2E|kurs32.exe |00274F2E|Vcl.ActnList.pas |Vcl.ActnList |TCustomAction |Execute | | |00000020|03 |02C1F3A0|00CB4EA5|kurs32.exe |00274EA5|Vcl.ActnList.pas |Vcl.ActnList |TCustomAction |AssignTo | | |00000020|03 |02C1F3A8|00B7C3F3|kurs32.exe |0013C3F3|System.Classes.pas |System.Classes |TBasicActionLink |Execute | | |00000020|03 |02C1F3B4|01426651|kurs32.exe |009E6651|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMenuBar |ExecAction | | |00000030|03 |02C1F3C4|01427F48|kurs32.exe |009E7F48|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMenuBar |TrackMenu | | |00000030|03 |02C1F3D0|01427F67|kurs32.exe |009E7F67|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMenuBar |TrackMenu | | |00000030|03 |02C1F3F4|0142BA9A|kurs32.exe |009EBA9A|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMainMenuBar|TrackMenu | | |00000030|03 |02C1F400|0142BAB9|kurs32.exe |009EBAB9|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMainMenuBar|TrackMenu | | |00000020|03 |02C1F40C|014261D0|kurs32.exe |009E61D0|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMenuBar |CMItemClicked | | |00000020|03 |02C1F428|00CD23E2|kurs32.exe |002923E2|Vcl.Controls.pas |Vcl.Controls |TControl |WndProc | | |00000020|03 |02C1F474|00CD2018|kurs32.exe |00292018|Vcl.Controls.pas |Vcl.Controls |TControl |Perform | | |00000020|03 |02C1F480|74AFE729|user32.dll |0000E729|user32.dll |user32 | | (possible DefWindowProcW+889) | | |00000020|03 |02C1F4C0|00CD6C66|kurs32.exe |00296C66|Vcl.Controls.pas |Vcl.Controls | |InternalControlAtPos | | |00000020|03 |02C1F4D4|00CAA1C6|kurs32.exe |0026A1C6|Vcl.Graphics.pas |Vcl.Graphics | |FreeMemoryContexts | | |00000020|03 |02C1F4E4|74AFE5AB|user32.dll |0000E5AB|user32.dll |user32 | | (possible DefWindowProcW+507) | | |00000020|03 |02C1F4F4|74AFE5BC|user32.dll |0000E5BC|user32.dll |user32 | | (possible DefWindowProcW+524) | | |00000020|03 |02C1F504|74AFE5D6|user32.dll |0000E5D6|user32.dll |user32 | | (possible DefWindowProcW+550) | | |00000020|03 |02C1F50C|00CD6DBD|kurs32.exe |00296DBD|Vcl.Controls.pas |Vcl.Controls |TWinControl |IsControlMouseMsg | | |00000020|03 |02C1F544|00CD7419|kurs32.exe |00297419|Vcl.Controls.pas |Vcl.Controls |TWinControl |WndProc | | |00000020|03 |02C1F564|74AFD685|user32.dll |0000D685|user32.dll |user32 | | (possible DispatchMessageW+3205) | | |00000020|03 |02C1F568|74AFD331|user32.dll |0000D331|user32.dll |user32 | | (possible DispatchMessageW+2353) | | |00000020|03 |02C1F56C|00A4C298|kurs32.exe |0000C298|System.pas |System |TMonitor |TryEnter | | |00000020|03 |02C1F574|00A4BDC0|kurs32.exe |0000BDC0|System.pas |System |TMonitor |Enter | | |00000020|03 |02C1F578|74AFD2FF|user32.dll |0000D2FF|user32.dll |user32 | | (possible DispatchMessageW+2303) | | |00000020|03 |02C1F584|00A4BC28|kurs32.exe |0000BC28|System.pas |System |TMonitor |CheckOwningThread | | |00000020|03 |02C1F58C|00A4BF4E|kurs32.exe |0000BF4E|System.pas |System |TMonitor |Exit | | |00000020|03 |02C1F5A0|0142803B|kurs32.exe |009E803B|Vcl.ActnMenus.pas |Vcl.ActnMenus |TCustomActionMenuBar |WndProc | | |00000030|03 |02C1F5B8|00CD6AB3|kurs32.exe |00296AB3|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000030|03 |02C1F5C4|00CD6AC4|kurs32.exe |00296AC4|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000020|03 |02C1F5E0|00B7D3D8|kurs32.exe |0013D3D8|System.Classes.pas |System.Classes | |StdWndProc | | |00000020|03 |02C1F5F8|74B1D2D1|user32.dll |0002D2D1|user32.dll |user32 | | (possible SetManipulationInputTarget+81)| | |00000020|03 |02C1F624|74AFD305|user32.dll |0000D305|user32.dll |user32 | | (possible DispatchMessageW+2309) | | |00000020|03 |02C1F64C|74B0741A|user32.dll |0001741A|user32.dll |user32 | | (possible CallNextHookEx+1050) | | |00000020|03 |02C1F66C|74B07439|user32.dll |00017439|user32.dll |user32 | | (possible CallNextHookEx+1081) | | |00000020|03 |02C1F6A4|74AFD196|user32.dll |0000D196|user32.dll |user32 | | (possible DispatchMessageW+1942) | | |00000030|03 |02C1F6FC|74B215C0|user32.dll |000315C0|user32.dll |user32 | | (possible EndTask+8240) | | |00000020|03 |02C1F70C|74AFCC4F|user32.dll |0000CC4F|user32.dll |user32 | | (possible DispatchMessageW+591) | | |00000020|03 |02C1F74C|74AFC493|user32.dll |0000C493|user32.dll |user32 | |GetPropW | | |00000030|03 |02C1F770|74B215C0|user32.dll |000315C0|user32.dll |user32 | | (possible EndTask+8240) | | |00000020|03 |02C1F780|74AFCA0B|user32.dll |0000CA0B|user32.dll |user32 | |DispatchMessageW | | |00000020|03 |02C1F78C|00DF497F|kurs32.exe |003B497F|Vcl.Forms.pas |Vcl.Forms |TApplication |ProcessMessage | | |00000020|03 |02C1F7A8|00DF49C2|kurs32.exe |003B49C2|Vcl.Forms.pas |Vcl.Forms |TApplication |HandleMessage | | |00000030|03 |02C1F7D4|00DF4D0E|kurs32.exe |003B4D0E|Vcl.Forms.pas |Vcl.Forms |TApplication |Run | | |00000030|03 |02C1F7E0|00DF4D49|kurs32.exe |003B4D49|Vcl.Forms.pas |Vcl.Forms |TApplication |Run | | |00004020|04 |02C1F7FC|01E79168|kurs32.exe |01439168|kurs32.dpr |kurs32 | |initialization |92[15] | |7FFF7FFE|03 |02C1F814|745D62C2|kernel32.dll|000162C2|KERNEL32.DLL |KERNEL32 | |BaseThreadInitThunk | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |007D0000|WINMMBASE.dll |Base Multimedia Extension API DLL |6.2.14393.0 |131208 |2016-07-16 14:18:14|C:\Windows\System32\ | |00A40000|kurs32.exe |Kursverwaltung |3.31.4.440 |32671288|2023-01-12 10:54:50|C:\Program Files (x86)\Kursverwaltung\ | |03070000|ChilkatDelphi32.dll |Chilkat Delphi DLL 32-bit |9.5.0.93 |12034224|2022-11-18 11:18:20|C:\Program Files (x86)\Kursverwaltung\ | |06590000|security.dll |Security Support Provider Interface |6.2.14393.0 |4608 |2016-07-16 14:18:10|C:\Windows\System32\ | |097F0000|coml2.dll |Microsoft COM for Windows |6.2.14393.2608 |367352 |2018-10-25 04:46:37|C:\Windows\System32\ | |0B680000|wintrust.dll |Microsoft Trust Verification APIs |6.2.14393.5427 |276744 |2022-09-30 13:22:53|C:\Windows\System32\ | |50030000|borlndmm.dll |Embarcadero Memory Manager |23.0.22248.5795 |50048 |2020-08-31 13:35:46|C:\Program Files (x86)\Kursverwaltung\ | |59440000|mssprxy.dll |Microsoft Search Proxy |7.0.14393.5582 |54272 |2022-12-01 10:19:42|C:\Windows\System32\ | |596B0000|PortableDeviceApi.dll |Windows-API-Komponenten für tragbare Geräte |6.2.14393.4169 |523776 |2021-01-07 23:32:42|C:\Windows\System32\ | |59A30000|DevDispItemProvider.dll |DeviceItem inproc devquery subsystem |6.2.14393.0 |90624 |2016-07-16 14:19:03|C:\Windows\System32\ | |59AC0000|dlnashext.dll |DLNA Namespace DLL |6.2.14393.4169 |248832 |2021-01-07 23:39:20|C:\Windows\System32\ | |59B10000|ntshrui.dll |Shellerweiterungen für Freigaben |6.2.14393.5127 |774144 |2022-05-15 11:21:02|C:\Windows\System32\ | |59BF0000|twinapi.dll |twinapi |6.2.14393.5582 |419840 |2022-12-01 10:20:11|C:\Windows\System32\ | |59C60000|linkinfo.dll |Windows Volume Tracking |6.2.14393.0 |33792 |2016-07-16 14:19:08|C:\Windows\System32\ | |59C70000|actxprxy.dll |ActiveX Interface Marshaling Library |6.2.14393.3808 |1578496 |2020-07-08 07:44:40|C:\Windows\System32\ | |59E00000|Windows.Storage.Search.dll |Windows.Storage.Search |6.2.14393.4169 |701440 |2021-01-07 23:28:53|C:\Windows\System32\ | |59EB0000|StructuredQuery.dll |Structured Query |7.0.14393.5127 |531456 |2022-05-15 11:20:49|C:\Windows\System32\ | |59F70000|NetworkExplorer.dll |Netzwerk-Explorer |6.2.14393.0 |1184768 |2016-07-16 14:18:13|C:\Windows\System32\ | |5A0A0000|thumbcache.dll |Microsoft Thumbnail Cache |6.2.14393.5127 |257024 |2022-05-15 11:20:49|C:\Windows\System32\ | |5A0F0000|dui70.dll |Windows DirectUI Engine |6.2.14393.4169 |1454080 |2021-01-07 23:28:55|C:\Windows\System32\ | |5A2A0000|PlayToDevice.dll |PLAYTODEVICE-DLL |6.2.14393.5127 |343552 |2022-05-15 11:20:04|C:\Windows\System32\ | |5A330000|tiptsf.dll |Textdienstframework für Bildschirmtastatur und Schreibbereich|6.2.14393.4169 |492824 |2021-01-07 23:58:53|C:\Program Files (x86)\Common Files\microsoft shared\ink\ | |5A3C0000|shdocvw.dll |Shelldokumentobjekt und Steuerungsbibliothek |6.2.14393.4169 |226304 |2021-01-07 23:32:16|C:\Windows\System32\ | |5A400000|ieframe.dll |Internet Browser |11.0.14393.5582 |12367360|2022-12-01 10:18:55|C:\Windows\System32\ | |5AFE0000|url.dll |Internet Shortcut Shell Extension DLL |11.0.14393.2007 |233472 |2018-01-01 05:50:52|C:\Windows\System32\ | |5B020000|duser.dll |Windows DirectUser Engine |6.2.14393.0 |482304 |2016-07-16 14:19:11|C:\Windows\System32\ | |5B0A0000|osbaseln.dll |Service Reporting API |6.2.14393.0 |21504 |2016-07-16 14:19:00|C:\Windows\System32\ | |5B0B0000|appwiz.cpl |Shellanwendungs-Manager |6.2.14393.4169 |761344 |2021-01-07 23:31:26|C:\Windows\System32\ | |5B170000|olepro32.dll |OLEPRO32.DLL |6.2.14393.5127 |90624 |2022-05-15 11:20:10|C:\Windows\System32\ | |5B190000|mapi32.dll |Erweiterte MAPI 1.0 für Windows NT |1.0.2536.0 |90624 |2016-07-16 14:19:01|C:\Windows\System32\ | |5B1B0000|wer.dll |Windows-Fehlerbericht-DLL |6.2.14393.4704 |590232 |2021-10-05 06:57:02|C:\Windows\System32\ | |5B250000|Faultrep.dll |Windows-Benutzermodus-Absturzberichterstattungs-DLL |6.2.14393.4704 |348568 |2021-10-05 06:57:02|C:\Windows\System32\ | |5B2B0000|fontsub.dll |Font Subsetting DLL |6.2.14393.4583 |98304 |2021-07-31 05:45:39|C:\Windows\System32\ | |5B2D0000|oledlg.dll |OLE-Benutzerschnittstellen-Unterstützung |6.2.14393.0 |110592 |2016-07-16 14:19:00|C:\Windows\System32\ | |6C800000|winnsi.dll |Network Store Information RPC interface |6.2.14393.2339 |26848 |2018-06-12 02:08:31|C:\Windows\System32\ | |6DA10000|MMDevAPI.dll |MMDevice-API |6.2.14393.4169 |352688 |2021-01-07 23:59:00|C:\Windows\System32\ | |6DCC0000|mfplat.dll |Media Foundation Platform DLL |6.2.14393.4169 |1129504 |2021-01-07 23:59:01|C:\Windows\System32\ | |6E290000|devobj.dll |Device Information Set DLL |6.2.14393.0 |132232 |2016-07-16 14:18:16|C:\Windows\System32\ | |6E3E0000|atlthunk.dll |atlthunk.dll |6.2.14393.2457 |22528 |2018-08-23 04:43:38|C:\Windows\System32\ | |6E890000|msftedit.dll |Rich Text Edit Control, v8.5 |6.2.14393.4704 |2739712 |2021-10-05 06:14:41|C:\Windows\System32\ | |6EB40000|twinapi.appcore.dll |twinapi.appcore |6.2.14393.5127 |968416 |2022-05-15 11:20:49|C:\Windows\System32\ | |6EC30000|shfolder.dll |Shell Folder Service |6.2.14393.0 |9216 |2016-07-16 14:18:14|C:\Windows\System32\ | |6ED50000|Windows.Globalization.dll |Windows Globalization |6.2.14393.5127 |1247232 |2022-05-15 11:20:47|C:\Windows\System32\ | |6EE90000|explorerframe.dll |ExplorerFrame |6.2.14393.4169 |4424704 |2021-01-07 23:29:46|C:\Windows\System32\ | |6F8F0000|dcomp.dll |Microsoft DirectComposition Library |6.2.14393.4169 |1121744 |2021-01-08 00:01:21|C:\Windows\System32\ | |6FA10000|GdiPlus.dll |Microsoft GDI+ |6.2.14393.5501 |1459712 |2022-11-04 16:53:45|C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.5501_none_f6739b88f254ee1f\ | |6FBA0000|ondemandconnroutehelper.dll|On Demand Connctiond Route Helper |6.2.14393.0 |50176 |2016-07-16 14:19:03|C:\Windows\System32\ | |6FBB0000|RTWorkQ.dll |Realtime WorkQueue DLL |6.2.14393.479 |152416 |2018-02-02 19:23:11|C:\Windows\System32\ | |6FBE0000|d3d11.dll |Direct3D 11 Runtime |6.2.14393.5006 |2279776 |2022-03-02 12:04:38|C:\Windows\System32\ | |6FF70000|dxgi.dll |DirectX Graphics Infrastructure |6.2.14393.5127 |526248 |2022-05-15 11:20:47|C:\Windows\System32\ | |70050000|globinputhost.dll |Windows Globalization Extension API for Input |6.2.14393.2457 |135168 |2018-08-23 04:41:39|C:\Windows\System32\ | |70760000|comctl32.dll |Bibliothek für Steuerelemente |6.10.14393.4169 |2123032 |2021-01-07 23:58:48|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.4169_none_c58df2c997bddaf8\| |70990000|Bcp47Langs.dll |BCP47 Language Classes |6.2.14393.2457 |329944 |2018-08-23 05:04:17|C:\Windows\System32\ | |70A90000|dataexchange.dll |Data exchange |6.2.14393.4169 |257536 |2021-01-07 23:34:20|C:\Windows\System32\ | |70C00000|windowscodecs.dll |Microsoft Windows Codecs Library |6.2.14393.5127 |1505520 |2022-05-15 11:20:49|C:\Windows\System32\ | |70D70000|winhttp.dll |Windows HTTP-Dienste |6.2.14393.5127 |633344 |2022-05-15 11:20:37|C:\Windows\System32\ | |70F10000|iertutil.dll |Laufzeit-Hilfsprogramm für Internet Explorer |11.0.14393.5582 |2316992 |2022-12-01 10:19:23|C:\Windows\System32\ | |71150000|urlmon.dll |OLE32-Erweiterung für Win32 |11.0.14393.5582 |1606656 |2022-12-01 10:19:23|C:\Windows\System32\ | |712F0000|propsys.dll |Microsoft-Eigenschaftensystem |7.0.14393.4169 |1376392 |2021-01-08 00:01:15|C:\Windows\System32\ | |71440000|dbgcore.dll |Windows Core Debugging Helpers |6.2.14321.1024 |135680 |2016-07-16 14:18:11|C:\Windows\System32\ | |71470000|dbghelp.dll |Windows Image Helper |6.2.14321.1024 |1220608 |2016-07-16 14:18:11|C:\Windows\System32\ | |71600000|dwmapi.dll |Microsoft Desktopfenster-Manager-API |6.2.14393.4169 |113912 |2021-01-07 23:57:51|C:\Windows\System32\ | |71620000|apphelp.dll |Clientbibliothek für Anwendungskompatibilität |6.2.14393.4350 |581120 |2021-04-08 08:40:24|C:\Windows\System32\ | |716C0000|edputil.dll |Hilfsprogramm „Unternehmensdatenschutz“ |6.2.14393.2457 |232448 |2018-08-23 04:44:07|C:\Windows\System32\ | |71700000|msimg32.dll |GDIEXT Client DLL |6.2.14393.0 |7168 |2016-07-16 14:18:13|C:\Windows\System32\ | |71710000|uxtheme.dll |Microsoft UxTheme-Bibliothek |6.2.14393.4169 |458240 |2021-01-07 23:34:46|C:\Windows\System32\ | |717C0000|drprov.dll |Microsoft Remotedesktop-Hostserver-Netzwerkanbieter |6.2.14393.0 |20992 |2016-07-16 14:19:05|C:\Windows\System32\ | |717D0000|ntlanman.dll |Microsoft(R) LAN-Manager |6.2.14393.2879 |58368 |2019-03-14 07:03:52|C:\Windows\System32\ | |71820000|oleacc.dll |Active Accessibility Core Component |7.2.14393.5127 |325632 |2022-05-15 11:21:09|C:\Windows\System32\ | |718A0000|winspool.drv |Windows-Spoolertreiber |6.2.14393.5582 |421376 |2022-12-01 10:19:43|C:\Windows\System32\ | |71910000|winmm.dll |MCI API-DLL |6.2.14393.0 |135376 |2016-07-16 14:18:14|C:\Windows\System32\ | |71950000|mpr.dll |Router-DLL für Mehrfachanbieter |6.2.14393.2879 |86136 |2019-03-14 07:15:32|C:\Windows\System32\ | |73060000|mswsock.dll |Microsoft Windows Sockets 2.0-Dienstanbieter |6.2.14393.3659 |305912 |2020-04-11 05:35:46|C:\Windows\System32\ | |730B0000|srvcli.dll |Server Service Client DLL |6.2.14393.5066 |76872 |2022-04-02 13:11:54|C:\Windows\System32\ | |730D0000|wkscli.dll |Workstation Service Client DLL |6.2.14393.5066 |63960 |2022-04-02 13:11:55|C:\Windows\System32\ | |73350000|secur32.dll |Security Support Provider Interface |6.2.14393.2273 |23552 |2018-04-28 05:15:05|C:\Windows\System32\ | |73770000|winsta.dll |Winstation Library |6.2.14393.0 |257248 |2016-07-16 14:18:08|C:\Windows\System32\ | |737C0000|netutils.dll |Net Win32 API Helpers DLL |6.2.14393.0 |36680 |2016-07-16 14:18:16|C:\Windows\System32\ | |737F0000|wsock32.dll |Windows Socket 32-Bit DLL |6.2.14393.0 |16384 |2016-07-16 14:18:13|C:\Windows\System32\ | |73800000|wtsapi32.dll |Windows Remote Desktop Session Host Server SDK APIs |6.2.14393.0 |53216 |2016-07-16 14:18:08|C:\Windows\System32\ | |73810000|wininet.dll |Interneterweiterungen für Win32 |11.0.14393.5582 |3630592 |2022-12-01 10:19:23|C:\Windows\System32\ | |73B90000|msi.dll |Windows Installer |5.0.14393.5501 |3700736 |2022-11-04 16:49:31|C:\Windows\System32\ | |73F20000|IPHLPAPI.DLL |IP-Hilfs-API |6.2.14393.2339 |184408 |2018-06-12 02:17:01|C:\Windows\System32\ | |73F50000|bcrypt.dll |Bibliothek mit kryptografischen Primitiven von Windows |6.2.14393.4583 |106792 |2021-07-31 06:17:41|C:\Windows\System32\ | |73F70000|userenv.dll |Userenv |6.2.14393.4583 |97560 |2021-07-31 06:17:04|C:\Windows\System32\ | |73F90000|netapi32.dll |Net Win32 API DLL |6.2.14393.5427 |74328 |2022-09-30 13:22:53|C:\Windows\System32\ | |73FF0000|cscapi.dll |Offline Files Win32 API |6.2.14393.0 |42496 |2016-07-16 14:18:09|C:\Windows\System32\ | |74010000|version.dll |Version Checking and File Installation Libraries |6.2.14393.0 |27360 |2016-07-16 14:18:14|C:\Windows\System32\ | |74020000|CRYPTBASE.dll |Base cryptographic API DLL |6.2.14393.0 |31528 |2016-07-16 14:18:14|C:\Windows\System32\ | |74030000|sspicli.dll |Security Support Provider Interface |6.2.14393.5427 |118760 |2022-09-30 13:22:37|C:\Windows\System32\ | |74050000|rpcrt4.dll |Remoteprozeduraufruf-Laufzeitumgebung |6.2.14393.5291 |785552 |2022-08-07 07:18:56|C:\Windows\System32\ | |74110000|psapi.dll |Process Status Helper |6.2.14393.0 |17048 |2016-07-16 14:18:09|C:\Windows\System32\ | |74180000|combase.dll |Microsoft COM für Windows |6.2.14393.5582 |2171264 |2022-12-01 10:19:18|C:\Windows\System32\ | |743A0000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.2.14393.0 |144632 |2016-07-16 14:18:13|C:\Windows\System32\ | |743E0000|powrprof.dll |Power Profile Helper DLL |6.2.14393.0 |275832 |2016-07-16 14:18:16|C:\Windows\System32\ | |74430000|imagehlp.dll |Windows NT Image Helper |6.2.14393.0 |93984 |2016-07-16 14:18:16|C:\Windows\System32\ | |74450000|ucrtbase.dll |Microsoft® C Runtime Library |6.2.14393.3659 |916680 |2020-04-11 05:36:03|C:\Windows\System32\ | |74530000|SHCore.dll |SHCORE |6.2.14393.5066 |550096 |2022-04-02 13:12:15|C:\Windows\System32\ | |745C0000|kernel32.dll |Client-DLL für Windows NT-Basis-API |6.2.14393.5582 |616976 |2022-12-01 10:18:33|C:\Windows\System32\ | |746A0000|profapi.dll |User Profile Basic API |6.2.14393.0 |54752 |2016-07-16 14:19:02|C:\Windows\System32\ | |746B0000|oleaut32.dll |OLEAUT32.DLL |6.2.14393.4402 |604264 |2021-04-27 06:24:12|C:\Windows\System32\ | |74750000|ws2_32.dll |Windows Socket 2.0-32-Bit-DLL |6.2.14393.3241 |402248 |2019-09-11 05:19:03|C:\Windows\System32\ | |74810000|msctf.dll |MSCTF-Server-DLL |6.2.14393.5127 |1260688 |2022-05-15 11:21:09|C:\Windows\System32\ | |74950000|gdi32.dll |GDI Client DLL |6.2.14393.4169 |170872 |2021-01-08 00:01:36|C:\Windows\System32\ | |74AF0000|user32.dll |Client-DLL für Windows USER-API (mehrere Benutzer) |6.2.14393.4169 |1438928 |2021-01-07 23:57:53|C:\Windows\System32\ | |74C50000|nsi.dll |NSI User-mode interface DLL |6.2.14393.3297 |20056 |2019-10-01 22:08:20|C:\Windows\System32\ | |74D00000|comdlg32.dll |DLL für gemeinsame Dialoge |6.2.14393.5192 |913920 |2022-06-11 09:21:54|C:\Windows\System32\ | |74DF0000|setupapi.dll |Windows Setup-API |6.2.14393.2608 |4268472 |2018-10-25 04:48:46|C:\Windows\System32\ | |75200000|msasn1.dll |ASN.1 Runtime APIs |6.2.14393.5501 |50040 |2022-11-04 16:50:42|C:\Windows\System32\ | |75210000|win32u.dll |Win32u |6.2.14393.51 |79536 |2018-02-02 19:21:39|C:\Windows\System32\ | |75230000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.2.14393.5006 |255592 |2022-03-02 12:03:48|C:\Windows\System32\ | |75280000|gdi32full.dll |GDI Client DLL |6.2.14393.5582 |1424960 |2022-12-01 10:20:21|C:\Windows\System32\ | |753E0000|bcryptPrimitives.dll |Windows Cryptographic Primitives Library |6.2.14393.4770 |373800 |2021-11-02 02:24:23|C:\Windows\System32\ | |75440000|crypt32.dll |Krypto-API32 |6.2.14393.5427 |1735352 |2022-09-30 13:22:52|C:\Windows\System32\ | |755F0000|msvcrt.dll |Windows NT CRT DLL |7.0.14393.2457 |773704 |2018-08-23 05:04:40|C:\Windows\System32\ | |756B0000|ole32.dll |Microsoft OLE für Windows |6.2.14393.5127 |967352 |2022-05-15 11:20:10|C:\Windows\System32\ | |757A0000|advapi32.dll |Erweiterte Windows 32 Base-API |6.2.14393.5427 |490088 |2022-09-30 13:22:26|C:\Windows\System32\ | |75820000|clbcatq.dll |COM+ Configuration Catalog |2001.12.10941.16384|528792 |2021-01-07 23:58:47|C:\Windows\System32\ | |758B0000|KERNELBASE.dll |Client-DLL für Windows NT-Basis-API |6.2.14393.5582 |1711072 |2022-12-01 10:19:02|C:\Windows\System32\ | |75A60000|shell32.dll |Allgemeine Windows-Shell-DLL |6.2.14393.5582 |20957976|2022-12-01 10:20:11|C:\Windows\System32\ | |76E40000|usp10.dll |Uniscribe Unicode script processor |6.2.14393.3321 |78336 |2019-10-17 05:22:59|C:\Windows\System32\ | |76EC0000|cfgmgr32.dll |Configuration Manager DLL |6.2.14393.0 |213848 |2016-07-16 14:18:16|C:\Windows\System32\ | |76F00000|msvcp_win.dll |Microsoft® C Runtime Library |6.2.14393.2999 |499032 |2019-05-21 04:45:07|C:\Windows\System32\ | |76F80000|windows.storage.dll |Microsoft WinRT Storage-API |6.2.14393.5582 |5722760 |2022-12-01 10:19:40|C:\Windows\System32\ | |774F0000|kernel.appcore.dll |AppModel API Host |6.2.14393.2312 |43416 |2018-06-08 06:33:46|C:\Windows\System32\ | |77500000|shlwapi.dll |Shell Light-weight-Hilfsprogrammbibliothek |6.2.14393.5427 |285520 |2022-09-30 13:24:47|C:\Windows\System32\ | |775A0000|ntdll.dll |DLL für NT-Layer |6.2.14393.5427 |1571648 |2022-09-30 13:22:39|C:\Windows\System32\ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ---------------------- Assembler Information: ------------------------------------------------------------------------------ ; Base Address: $A4D000, Allocation Base: $A40000, Region Size: 21155840 ; Allocation Protect: PAGE_EXECUTE_WRITECOPY, Protect: PAGE_EXECUTE_READ ; State: MEM_COMMIT, Type: MEM_IMAGE ; ; ; System._UStrAsg (Line=0 - Offset=15) ; ------------------------------------ 00A4D72B E850FBFFFF CALL -$04B0 ; ($00A4D280) System._NewUnicodeString 00A4D730 89C2 MOV EDX, EAX 00A4D732 58 POP EAX 00A4D733 52 PUSH EDX 00A4D734 8B48FC MOV ECX, [EAX-4] 00A4D737 D1E1 SHL ECX, 1 00A4D739 E89EA3FFFF CALL -$5C62 ; ($00A47ADC) System.Move 00A4D73E 5A POP EDX 00A4D73F 58 POP EAX 00A4D740 EB04 JMP +4 ; ($00A4D746) System._UStrAsg (Line=0) 00A4D742 ?? ; unaccessible location Registers: ----------------------------- EAX: 0B4582EC EDI: 00000117 EBX: 0B4582C0 ESI: 0B4847FC ECX: 00430053 EBP: 02C1EDD4 EDX: 0B4847FC ESP: 02C1EDC8 EIP: 00A4D74E FLG: 00010206 EXP: 00A4D74E STK: 02C1EDC8 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 02C1EE04: 0B4847FC 00A4D74E: 83 79 F8 00 7E 0E F0 FF 49 F8 75 08 8D 41 F4 E8 .y..~...I.u..A.. 02C1EE00: 00EAFAB7 00A4D75E: F2 9F FF FF C3 90 85 D2 74 0A 83 7A F8 00 7C 04 ........t..z..|. 02C1EDFC: 02C1EE28 00A4D76E: F0 FF 42 F8 8B 08 89 10 85 C9 74 14 83 79 F8 00 ..B.......t..y.. 02C1EDF8: 00000000 00A4D77E: 7E 0E F0 FF 49 F8 75 08 8D 41 F4 E8 C6 9F FF FF ~...I.u..A...... 02C1EDF4: 00000001 00A4D78E: C3 90 39 10 74 23 85 D2 0F 84 D8 FB FF FF 8B 4A ..9.t#.........J 02C1EDF0: 0B4847FC 00A4D79E: FC D1 E9 0F 84 CD FB FF FF 51 52 50 E8 C5 7F FF .........QRP.... 02C1EDEC: 00EAD16D 00A4D7AE: FF 85 C0 0F 84 55 FB FF FF C3 E9 D3 FF FF FF C3 .....U.......... 02C1EDE8: 02C1EDFC 00A4D7BE: 8B C0 85 D2 74 28 83 7A F8 00 7D 1E 50 52 8B 42 ....t(.z..}.PR.B 02C1EDE4: 00000001 00A4D7CE: FC 0F B7 52 F4 E8 E8 FA FF FF 89 C2 58 52 8B 48 ...R........XR.H 02C1EDE0: 06778F00 00A4D7DE: FC E8 F8 A2 FF FF 5A 58 EB 04 F0 FF 42 F8 8B 08 ......ZX....B... 02C1EDDC: 00EAFA1C 00A4D7EE: 89 10 85 C9 74 14 83 79 F8 00 7E 0E F0 FF 49 F8 ....t..y..~...I. 02C1EDD8: 01C344C4 00A4D7FE: 75 08 8D 41 F4 E8 4C 9F FF FF C3 8D 40 00 85 D2 u..A..L.....@... 02C1EDD4: 02C1EDE8 00A4D80E: 74 0A 83 7A F8 00 7C 04 F0 FF 42 F8 8B 08 89 10 t..z..|...B..... 02C1EDD0: 00000001 00A4D81E: 85 C9 74 14 83 79 F8 00 7E 0E F0 FF 49 F8 75 08 ..t..y..~...I.u. 02C1EDCC: 06778F00 00A4D82E: 8D 41 F4 E8 1E 9F FF FF C3 90 85 C0 74 05 83 E8 .A..........t... 02C1EDC8: 018020EF 00A4D83E: 04 8B 00 C3 8B C0 85 C0 74 07 83 E8 04 8B 00 D1 ........t.......