0000735: surface0.apng causes ghost to crash SSP - Bug Tracking System for SSP

		Category
		SSPBT：本体(SSP)

Severity	crash	Reproducibility	always
Status	closed
Fixed in Version	2.7 (リリース)

Summary	0000735: surface0.apng causes ghost to crash SSP
Description	Opening a ghost containing a surface0.apng file causes SSP to crash. This is only known to occur with one specific ghost, meaning the error could be due to the means the surface0.apng file was created. Environment Information: SSP version: 2.7.40 Windows 11 25H2 Ghost used: Aster™ Assistant Software Reproduction procedure: 1. Call/Change to affected ghost. * The user information in the STACKTRC.txt file has been redacted for privacy.
Tags	No tags attached.
Attach Tags	(Separate by ",")
Attached Files	STACKTRC.TXT (84,503 bytes) SPDebugger/2.17.24106.A Exception Raised at 7761552b because UNKNOWN_EXCEPTION_c0000029 (#c0000029) Windows NT 10.0.26200 UAC: Enabled,Limited Time: 2026/1/20 21:32:32.207 Phys.Mem: 3439/16107MB PageFile: 2942/24055MB CPU : Intel 0.6.10.6 2496MHz Features:MMX SSE HT AES-NI (13th Gen Intel(R) Core(TM) i5-1334U) Package:1 Node:1 Core:10 Thread:12 SSP/2.7.40 (20260121-12; Windows NT 10.0.26200) Volume Information: C:\ Fixed [ 325804MB Free \| 486060MB Total \| 67%] (NTFS,Normal) Monitor Information: 0: \\.\DISPLAY1 - Work=0,0,1920,1200 Size=1920x1200 Env. Variables: =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\[username]\AppData\Roaming com.adobe.versioncue.client.applocale=en_US com.adobe.versioncue.client.appname=AdobeDrive com.adobe.versioncue.client.appversion=1.0.0 CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=DESKTOP-HJM12DF ComSpec=C:\Windows\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_23936_1262719628=1 EFC_23936_1592913036=1 EFC_23936_2283032206=1 EFC_23936_2775293581=1 EFC_23936_344590478=1 EFC_23936_3789132940=1 FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer FPS_BROWSER_USER_PROFILE_STRING=Default HOMEDRIVE=C: HOMEPATH=\Users\[username] LOCALAPPDATA=C:\Users\[username]\AppData\Local LOGONSERVER=\\DESKTOP-HJM12DF NUMBER_OF_PROCESSORS=12 OneDrive=C:\Users\[username]\OneDrive OneDriveConsumer=C:\Users\[username]\OneDrive OS=Windows_NT Path=C:\Users\[username]\Desktop\ssp\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\Git\cmd;C:\Program Files\Microsoft VS Code\bin;C:\Program Files\PowerShell\7\;C:\Users\[username]\AppData\Local\Microsoft\WindowsApps;C:\Users\[username]\AppData\Local\GitHubDesktop\bin PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC POWERSHELL_DISTRIBUTION_CHANNEL=MSI:Windows 10 Home Single Language PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 3, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba03 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\Windows TEMP=C:\Users\[username]\AppData\Local\Temp TMP=C:\Users\[username]\AppData\Local\Temp USERDOMAIN=DESKTOP-HJM12DF USERDOMAIN_ROAMINGPROFILE=DESKTOP-HJM12DF USERNAME=[username] USERPROFILE=C:\Users\[username] windir=C:\Windows ZES_ENABLE_SYSMAN=1 Loaded Drivers: -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe -00000000 : ntoskrnl.exe Executing Processes: [With ToolHelp32] -00000000 : [System Process] (36 Threads.) -00000004 : System (294 Threads.) 9.0.1025.47515 - System Microsoft Corporation. All rights reserved. -000000bc : Secure System (0 Threads.) -000000e8 : Registry (4 Threads.) -000002e4 : smss.exe (2 Threads.) -00000334 : csrss.exe (15 Threads.) -00000418 : wininit.exe (2 Threads.) -00000420 : csrss.exe (15 Threads.) -0000045c : winlogon.exe (4 Threads.) -000004a8 : services.exe (8 Threads.) -000004bc : LsaIso.exe (1 Threads.) -000004c4 : lsass.exe (12 Threads.) -00000550 : svchost.exe (14 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000568 : WUDFHost.exe (9 Threads.) -00000584 : fontdrvhost.exe (5 Threads.) -0000058c : fontdrvhost.exe (5 Threads.) -00000600 : svchost.exe (11 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000638 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000668 : WUDFHost.exe (21 Threads.) -000006b4 : dwm.exe (21 Threads.) -00000718 : WUDFHost.exe (11 Threads.) -00000730 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000074c : svchost.exe (10 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000007b0 : svchost.exe (11 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000007d8 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000007e0 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000007e8 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000004a4 : IntelCpHDCPSvc.exe (3 Threads.) -000007a4 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000808 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000824 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000894 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000008bc : svchost.exe (21 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000008d4 : svchost.exe (6 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000097c : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000098c : svchost.exe (10 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000a1c : svchost.exe (6 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000a44 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000b78 : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000b90 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000ba0 : svchost.exe (13 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000bd8 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000be0 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000be8 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000c20 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000c38 : Memory Compression (22 Threads.) -00000c78 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000cc8 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000cc4 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000cfc : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000d74 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000df8 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000e3c : svchost.exe (15 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000e58 : svchost.exe (6 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000e88 : spoolsv.exe (7 Threads.) -00000eb0 : svchost.exe (16 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000f18 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000fa4 : OneApp.IGCC.WinService.exe (6 Threads.) -00000fac : svchost.exe (12 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000fb4 : jhi_service.exe (2 Threads.) -00000fbc : IntelAudioService.exe (7 Threads.) -00000fc4 : ipfsvc.exe (8 Threads.) -00000fd4 : svchost.exe (18 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000fe4 : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000fec : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000006a0 : ipf_uf.exe (3 Threads.) -00000d98 : RtkAudUService64.exe (28 Threads.) -00000dc4 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000dd8 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000f30 : MpDefenderCoreService.exe (13 Threads.) -00001028 : MsMpEng.exe (55 Threads.) -000010ec : svchost.exe (10 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000010f8 : WMIRegistrationService.exe (2 Threads.) -00001100 : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001108 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000012fc : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001464 : svchost.exe (6 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001594 : wlanext.exe (6 Threads.) 10.0.26100.7309 - Windows Wireless LAN 802.11 Extensibility Framework Microsoft Corporation. All rights reserved. -000015c8 : Intel_PIE_Service.exe (5 Threads.) -00001604 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001668 : AggregatorHost.exe (3 Threads.) -00001640 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000105c : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000938 : NgcIso.exe (1 Threads.) -00001828 : NisSrv.exe (4 Threads.) -0000193c : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000019e4 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000017f8 : ipf_helper.exe (4 Threads.) -00000148 : sihost.exe (11 Threads.) -00001a28 : svchost.exe (13 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001a3c : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001388 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000046c : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000860 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001994 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000131c : taskhostw.exe (9 Threads.) -00001c28 : CrossDeviceResume.exe (5 Threads.) -00001c68 : svchost.exe (13 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001e60 : svchost.exe (16 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000253c : SearchIndexer.exe (25 Threads.) 7.0.26100.7623 - Microsoft Windows Search Indexer Microsoft Corporation. All rights reserved. -00002670 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002728 : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000810 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002cc8 : PhoneExperienceHost.exe (19 Threads.) -00002dbc : ctfmon.exe (12 Threads.) 10.0.26100.7309 - CTF Loader Microsoft Corporation. All rights reserved. -00002dc8 : TabTip.exe (7 Threads.) -00000d90 : SecurityHealthSystray.exe (1 Threads.) -0000275c : SecurityHealthService.exe (9 Threads.) -000015c0 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001a24 : ApplicationFrameHost.exe (6 Threads.) -000024f8 : svchost.exe (1 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002210 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002098 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002510 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002dd8 : svchost.exe (18 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002f80 : svchost.exe (13 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000032d4 : RtkAudUService64.exe (10 Threads.) -00003390 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000033e4 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00003028 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000305c : svchost.exe (17 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000009b8 : WmiPrvSE.exe (5 Threads.) 10.0.26100.7309 - WMI Provider Host Microsoft Corporation. All rights reserved. -00001aa0 : svchost.exe (8 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00002438 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00000e74 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000032a4 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000027a4 : RuntimeBroker.exe (2 Threads.) -000019c4 : QuickControls.exe (8 Threads.) -000034a8 : BudsManager.exe (9 Threads.) -000033ec : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000451c : RuntimeBroker.exe (35 Threads.) -000050f8 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00001a1c : Photos.exe (22 Threads.) -00004114 : Photos.exe (20 Threads.) -00000bf8 : Photos.exe (20 Threads.) -00004310 : RtkUWP.exe (14 Threads.) -00003c10 : RuntimeBroker.exe (2 Threads.) -00002930 : steam.exe (44 Threads.) -00004ee0 : steamwebhelper.exe (33 Threads.) -00005444 : steamservice.exe (4 Threads.) -00004480 : steamwebhelper.exe (6 Threads.) -00004fd8 : steamwebhelper.exe (20 Threads.) -00005650 : steamwebhelper.exe (18 Threads.) -00005408 : steamwebhelper.exe (9 Threads.) -0000481c : steamwebhelper.exe (28 Threads.) -00005bd8 : steamwebhelper.exe (9 Threads.) -000060fc : OneDrive.exe (39 Threads.) -00004c40 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000065bc : FileCoAuth.exe (14 Threads.) -00005d80 : explorer.exe (214 Threads.) 10.0.26100.7623 - Windows Explorer Microsoft Corporation. All rights reserved. -00005d6c : StartMenuExperienceHost.exe (23 Threads.) -00005b54 : ShellExperienceHost.exe (27 Threads.) -000040a4 : SearchHost.exe (23 Threads.) -00006640 : TextInputHost.exe (48 Threads.) -000064f0 : msedgewebview2.exe (44 Threads.) -00005bb4 : msedgewebview2.exe (7 Threads.) -00005f20 : msedgewebview2.exe (19 Threads.) -00004594 : msedgewebview2.exe (27 Threads.) -000027c0 : msedgewebview2.exe (9 Threads.) -00001b48 : msedgewebview2.exe (24 Threads.) -00002474 : svchost.exe (4 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00003e74 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00003eb0 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00003ca8 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -0000567c : dllhost.exe (2 Threads.) 10.0.26100.1 - COM Surrogate Microsoft Corporation. All rights reserved. -00005b24 : svchost.exe (3 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000053f0 : XboxPcAppFT.exe (5 Threads.) -00000790 : RuntimeBroker.exe (4 Threads.) -00005930 : WUDFHost.exe (5 Threads.) -000020e0 : RuntimeBroker.exe (2 Threads.) -00002fa4 : svchost.exe (2 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000037e4 : backgroundTaskHost.exe (13 Threads.) 10.0.26100.1 - Background Task Host Microsoft Corporation. All rights reserved. -00005380 : chrome.exe (46 Threads.) -00004020 : chrome.exe (22 Threads.) -00005688 : chrome.exe (26 Threads.) -0000458c : chrome.exe (12 Threads.) -000068b0 : chrome.exe (24 Threads.) -00000594 : chrome.exe (19 Threads.) -00004760 : chrome.exe (23 Threads.) -00005fa0 : chrome.exe (22 Threads.) -00002a3c : chrome.exe (24 Threads.) -00001c5c : chrome.exe (24 Threads.) -00002344 : chrome.exe (23 Threads.) -000027d8 : chrome.exe (24 Threads.) -00005430 : chrome.exe (24 Threads.) -00001d8c : chrome.exe (26 Threads.) -00006b14 : chrome.exe (20 Threads.) -00002c70 : chrome.exe (26 Threads.) -00002c0c : chrome.exe (23 Threads.) -00003a14 : chrome.exe (23 Threads.) -00006610 : SystemSettings.exe (43 Threads.) -000040a0 : UserOOBEBroker.exe (1 Threads.) -00005ee0 : Flash.exe (29 Threads.) -00002b80 : FNPLicensingService.exe (5 Threads.) -000054b4 : chrome.exe (26 Threads.) -0000075c : chrome.exe (27 Threads.) -000012d4 : backgroundTaskHost.exe (13 Threads.) 10.0.26100.1 - Background Task Host Microsoft Corporation. All rights reserved. -00002e58 : steamwebhelper.exe (24 Threads.) -00006660 : chrome.exe (24 Threads.) -00003d64 : chrome.exe (24 Threads.) -00004a98 : chrome.exe (23 Threads.) -00001ed8 : chrome.exe (24 Threads.) -00004c64 : chrome.exe (10 Threads.) -000038b8 : chrome.exe (11 Threads.) -00002e68 : chrome.exe (23 Threads.) -000063a8 : chrome.exe (23 Threads.) -000025ac : chrome.exe (23 Threads.) -00003da8 : chrome.exe (23 Threads.) -00003bf8 : LockApp.exe (13 Threads.) -00005f38 : chrome.exe (25 Threads.) -0000589c : chrome.exe (24 Threads.) -000020b0 : Discord.exe (55 Threads.) -00000b98 : Discord.exe (7 Threads.) -00001acc : Discord.exe (22 Threads.) -000027ec : Discord.exe (18 Threads.) -00003bd4 : Discord.exe (159 Threads.) -000037b4 : Discord.exe (7 Threads.) -00004b88 : svchost.exe (9 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -000067e4 : OneDrive.Sync.Service.exe (19 Threads.) -0000380c : Notepad.exe (21 Threads.) 10.0.26100.7309 - Notepad Microsoft Corporation. All rights reserved. -00006738 : chrome.exe (23 Threads.) -00006228 : chrome.exe (21 Threads.) -0000533c : chrome.exe (22 Threads.) -00002924 : chrome.exe (24 Threads.) -00004eec : chrome.exe (24 Threads.) -000047d0 : chrome.exe (24 Threads.) -000060a8 : chrome.exe (20 Threads.) -00002420 : chrome.exe (24 Threads.) -0000667c : chrome.exe (22 Threads.) -00004bc4 : taskhostw.exe (7 Threads.) -00002c7c : chrome.exe (23 Threads.) -00005200 : chrome.exe (24 Threads.) -0000603c : chrome.exe (26 Threads.) -00000de8 : chrome.exe (23 Threads.) -000045d8 : chrome.exe (23 Threads.) -0000477c : chrome.exe (24 Threads.) -00001d74 : chrome.exe (23 Threads.) -00004708 : chrome.exe (23 Threads.) -000064cc : chrome.exe (23 Threads.) -00005790 : chrome.exe (23 Threads.) -000039a8 : chrome.exe (23 Threads.) -00002248 : chrome.exe (24 Threads.) -00005c08 : chrome.exe (24 Threads.) -00003144 : chrome.exe (24 Threads.) -000038d8 : chrome.exe (23 Threads.) -00004e4c : chrome.exe (24 Threads.) -00004f0c : chrome.exe (24 Threads.) -00002190 : chrome.exe (21 Threads.) -00002040 : chrome.exe (23 Threads.) -00001470 : chrome.exe (23 Threads.) -00006ad0 : chrome.exe (23 Threads.) -0000569c : chrome.exe (26 Threads.) -000014dc : chrome.exe (24 Threads.) -000034d4 : chrome.exe (20 Threads.) -00003c30 : chrome.exe (21 Threads.) -000038f8 : chrome.exe (20 Threads.) -000062ec : chrome.exe (20 Threads.) -00005de0 : chrome.exe (20 Threads.) -0000094c : chrome.exe (20 Threads.) -00003fe8 : chrome.exe (24 Threads.) -000025e0 : chrome.exe (22 Threads.) -00000b60 : chrome.exe (24 Threads.) -00004e40 : chrome.exe (24 Threads.) -000015f8 : ShellHost.exe (7 Threads.) -00001144 : chrome.exe (24 Threads.) -000041c4 : chrome.exe (24 Threads.) -000067ec : chrome.exe (22 Threads.) -0000207c : chrome.exe (24 Threads.) -000027f8 : chrome.exe (24 Threads.) -000015ec : chrome.exe (22 Threads.) -00001b2c : chrome.exe (21 Threads.) -00002520 : chrome.exe (24 Threads.) -000004b8 : chrome.exe (24 Threads.) -00003a64 : chrome.exe (24 Threads.) -0000348c : chrome.exe (24 Threads.) -00002090 : chrome.exe (24 Threads.) -00002750 : chrome.exe (24 Threads.) -00001514 : chrome.exe (24 Threads.) -00006960 : chrome.exe (24 Threads.) -0000524c : chrome.exe (25 Threads.) -0000588c : chrome.exe (24 Threads.) -00003d04 : chrome.exe (25 Threads.) -00006f38 : chrome.exe (24 Threads.) -00004f7c : chrome.exe (24 Threads.) -00006c84 : chrome.exe (25 Threads.) -000023c4 : chrome.exe (24 Threads.) -000062b4 : chrome.exe (25 Threads.) -00000efc : chrome.exe (24 Threads.) -00001da8 : chrome.exe (24 Threads.) -00006fc0 : chrome.exe (24 Threads.) -00006c58 : chrome.exe (24 Threads.) -000039f8 : chrome.exe (24 Threads.) -0000577c : chrome.exe (26 Threads.) -00001b94 : chrome.exe (21 Threads.) -00004024 : chrome.exe (23 Threads.) -000082a4 : chrome.exe (24 Threads.) -00008510 : svchost.exe (5 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00006914 : svchost.exe (7 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00007ba4 : chrome.exe (21 Threads.) -00008184 : chrome.exe (24 Threads.) -00008084 : chrome.exe (24 Threads.) -0000664c : chrome.exe (24 Threads.) -0000783c : chrome.exe (24 Threads.) -000070e0 : ShellHost.exe (16 Threads.) -000084d0 : Photos.exe (23 Threads.) -000073b4 : Code.exe (45 Threads.) -00003894 : Code.exe (7 Threads.) -000075f0 : Code.exe (19 Threads.) -00006f10 : Code.exe (18 Threads.) -00003fa4 : Code.exe (23 Threads.) -0000735c : Code.exe (24 Threads.) -000052c0 : Code.exe (24 Threads.) -00007954 : Code.exe (25 Threads.) -00007b98 : Code.exe (8 Threads.) -00003de8 : chrome.exe (24 Threads.) -00007408 : chrome.exe (24 Threads.) -00003574 : Photos.exe (16 Threads.) -00004734 : chrome.exe (24 Threads.) -0000563c : chrome.exe (23 Threads.) -00001034 : chrome.exe (23 Threads.) -000040d4 : chrome.exe (24 Threads.) -00006d20 : chrome.exe (25 Threads.) -00004084 : chrome.exe (26 Threads.) -00007190 : chrome.exe (24 Threads.) -00000ed8 : chrome.exe (24 Threads.) -00008780 : chrome.exe (24 Threads.) -0000467c : chrome.exe (24 Threads.) -00003a68 : chrome.exe (24 Threads.) -000034c8 : chrome.exe (24 Threads.) -00007004 : chrome.exe (24 Threads.) -00008340 : chrome.exe (19 Threads.) -00006d44 : chrome.exe (24 Threads.) -00007e7c : chrome.exe (24 Threads.) -00000724 : chrome.exe (19 Threads.) -00001cfc : chrome.exe (24 Threads.) -000019dc : svchost.exe (14 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. -00007c34 : SearchProtocolHost.exe (8 Threads.) 7.0.26100.7623 - Microsoft Windows Search Protocol Host Microsoft Corporation. All rights reserved. -000045e8 : smartscreen.exe (6 Threads.) -00004e80 : audiodg.exe (3 Threads.) -000006d4 : SearchFilterHost.exe (2 Threads.) 7.0.26100.7623 - Microsoft Windows Search Filter Host Microsoft Corporation. All rights reserved. -00007a30 : SearchFilterHost.exe (2 Threads.) 7.0.26100.7623 - Microsoft Windows Search Filter Host Microsoft Corporation. All rights reserved. -0000736c : SearchFilterHost.exe (3 Threads.) 7.0.26100.7623 - Microsoft Windows Search Filter Host Microsoft Corporation. All rights reserved. -000046d0 : chrome.exe (23 Threads.) -000023b8 : chrome.exe (13 Threads.) -00008554 : chrome.exe (20 Threads.) ==> -00007d78 : ssp.exe (22 Threads.) 2.7.40.3000 - SSP (C) D-EXCLAMATION / SSP BUGTRAQ -000081d8 : svchost.exe (6 Threads.) 10.0.26100.5074 - Host Process for Windows Services Microsoft Corporation. All rights reserved. Executing Threads: [With ToolHelp32] -000083d4 : 8(0) -000071b0 : 8(0) -00006f34 : 8(0) -00006ebc : 8(0) -00006234 : 8(0) -0000782c : 8(0) -00005ab0 : 8(0) -000085b0 : 8(0) -00006d08 : 8(0) -00004a8c : 8(0) -00002a7c : 9(0) -00004e94 : 7(0) -00001e34 : 7(0) -00006164 : 8(0) -00008724 : 8(0) -000063d8 : 8(0) -000046cc : 8(0) ==> -000085d4 : 7(0) -00003b3c : 8(0) -0000807c : 7(0) -00006728 : 7(0) -00005500 : 7(0) Executing Services: [With SCM/NT] ---ADPSvc (Aggregated Data Platform Service) - Stopped/Paused ---ALG (Application Layer Gateway Service) - Stopped/Paused ---AppIDSvc (Application Identity) - Stopped/Paused *Appinfo (Application Information) - Running ---AppReadiness (App Readiness) - Stopped/Paused ---AppXSvc (AppX Deployment Service (AppXSVC)) - Stopped/Paused ---ApxSvc (Windows Virtual Audio Device Proxy Service) - Stopped/Paused AudioEndpointBuilder (Windows Audio Endpoint Builder) - Running Audiosrv (Windows Audio) - Running ---autotimesvc (Cellular Time) - Stopped/Paused ---AxInstSV (ActiveX Installer (AxInstSV)) - Stopped/Paused ---BDESVC (BitLocker Drive Encryption Service) - Stopped/Paused BFE (Base Filtering Engine) - Running ---BITS (Background Intelligent Transfer Service) - Stopped/Paused BrokerInfrastructure (Background Tasks Infrastructure Service) - Running BTAGService (Bluetooth Audio Gateway Service) - Running BthAvctpSvc (AVCTP service) - Running bthserv (Bluetooth Support Service) - Running camsvc (Capability Access Manager Service) - Running CDPSvc (Connected Devices Platform Service) - Running ---CertPropSvc (Certificate Propagation) - Stopped/Paused ---ClipSVC (Client License Service (ClipSVC)) - Stopped/Paused ---COMSysApp (COM+ System Application) - Stopped/Paused CoreMessagingRegistrar (CoreMessaging) - Running cplspcon (Intel(R) Content Protection HDCP Service) - Running CryptSvc (Cryptographic Services) - Running DcomLaunch (DCOM Server Process Launcher) - Running ---dcsvc (Declared Configuration(DC) service) - Stopped/Paused ---defragsvc (Optimize drives) - Stopped/Paused DeviceAssociationService (Device Association Service) - Running ---DeviceInstall (Device Install Service) - Stopped/Paused ---DevQueryBroker (DevQuery Background Discovery Broker) - Stopped/Paused Dhcp (DHCP Client) - Running ---diagsvc (Diagnostic Execution Service) - Stopped/Paused DiagTrack (Connected User Experiences and Telemetry) - Running DispBrokerDesktopSvc (Display Policy Service) - Running DisplayEnhancementService (Display Enhancement Service) - Running ---DmEnrollmentSvc (Device Management Enrollment Service) - Stopped/Paused ---dmwappushservice (Device Management Wireless Application Protocol (WAP) Push message Routing Service) - Stopped/Paused Dnscache (DNS Client) - Running ---DoSvc (Delivery Optimization) - Stopped/Paused ---dot3svc (Wired AutoConfig) - Stopped/Paused DPS (Diagnostic Policy Service) - Running dptftcs (Intel(R) Dynamic Tuning Technology Telemetry Service) - Running ---DsmSvc (Device Setup Manager) - Stopped/Paused DsSvc (Data Sharing Service) - Running DusmSvc (Data Usage) - Running ---EapHost (Extensible Authentication Protocol) - Stopped/Paused ---edgeupdate (Microsoft Edge Update Service (edgeupdate)) - Stopped/Paused ---edgeupdatem (Microsoft Edge Update Service (edgeupdatem)) - Stopped/Paused ---EFS (Encrypting File System (EFS)) - Stopped/Paused ---embeddedmode (Embedded Mode) - Stopped/Paused ---EntAppSvc (Enterprise App Management Service) - Stopped/Paused EventLog (Windows Event Log) - Running EventSystem (COM+ Event System) - Running ---fdPHost (Function Discovery Provider Host) - Stopped/Paused ---FDResPub (Function Discovery Resource Publication) - Stopped/Paused ---fhsvc (File History Service) - Stopped/Paused FLEXnet Licensing Service (FLEXnet Licensing Service) - Running ---FLEXnet Licensing Service 64 (FLEXnet Licensing Service 64) - Stopped/Paused FontCache (Windows Font Cache Service) - Running FrameServer (Windows Camera Frame Server) - Running FrameServerMonitor (Windows Camera Frame Server Monitor) - Running ---GameInputSvc (GameInput Service) - Stopped/Paused ---gpsvc (Group Policy Client) - Stopped/Paused ---GraphicsPerfSvc (GraphicsPerfSvc) - Stopped/Paused hidserv (Human Interface Device Service) - Running ---hpatchmon (Hotpatch Monitoring Service) - Stopped/Paused HvHost (HV Host Service) - Running ---icssvc (Windows Mobile Hotspot Service) - Stopped/Paused igccservice (Intel(R) Graphics Command Center Service) - Running ---IKEEXT (IKE and AuthIP IPsec Keying Modules) - Stopped/Paused InstallService (Microsoft Store Install Service) - Running ---Intel(R) Platform License Manager Service (Intel(R) Platform License Manager Service) - Stopped/Paused IntelAudioService (Intel(R) Audio Service) - Running InventorySvc (Inventory and Compatibility Appraisal service) - Running ipfsvc (Intel(R) Innovation Platform Framework Service) - Running iphlpsvc (IP Helper) - Running ---IpxlatCfgSvc (IP Translation Configuration Service) - Stopped/Paused jhi_service (Intel(R) Dynamic Application Loader Host Interface Service) - Running KeyIso (CNG Key Isolation) - Running ---KtmRm (KtmRm for Distributed Transaction Coordinator) - Stopped/Paused LanmanServer (Server) - Running LanmanWorkstation (Workstation) - Running lfsvc (Geolocation Service) - Running LicenseManager (Windows License Manager Service) - Running ---lltdsvc (Link-Layer Topology Discovery Mapper) - Stopped/Paused lmhosts (TCP/IP NetBIOS Helper) - Running ---LocalKdc (Kerberos Local Key Distribution Center) - Stopped/Paused LSM (Local Session Manager) - Running ---LxpSvc (Language Experience Service) - Stopped/Paused ---MapsBroker (Downloaded Maps Manager) - Stopped/Paused ---McmSvc (Mobile Connectivity Management Service) - Stopped/Paused ---McpManagementService (McpManagementService) - Stopped/Paused MDCoreSvc (MDCoreSvc) - Running ---MicrosoftEdgeElevationService (Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)) - Stopped/Paused ---midisrv (Windows MIDI Service) - Stopped/Paused mpssvc (Windows Defender Firewall) - Running ---MSDTC (Distributed Transaction Coordinator) - Stopped/Paused ---MSiSCSI (Microsoft iSCSI Initiator Service) - Stopped/Paused ---msiserver (Windows Installer) - Stopped/Paused ---NaturalAuthentication (Natural Authentication) - Stopped/Paused ---NcaSvc (Network Connectivity Assistant) - Stopped/Paused NcbService (Network Connection Broker) - Running ---NcdAutoSetup (Network Connected Devices Auto-Setup) - Stopped/Paused ---Netlogon (Netlogon) - Stopped/Paused Netman (Network Connections) - Running netprofm (Network List Service) - Running ---NetSetupSvc (Network Setup Service) - Stopped/Paused ---NetTcpPortSharing (Net.Tcp Port Sharing Service) - Stopped/Paused NgcCtnrSvc (Microsoft Passport Container) - Running NgcSvc (Microsoft Passport) - Running ---NlaSvc (Network Location Awareness) - Stopped/Paused nsi (Network Store Interface Service) - Running PcaSvc (Program Compatibility Assistant Service) - Running ---perceptionsimulation (Windows Perception Simulation Service) - Stopped/Paused ---PerfHost (Performance Counter DLL Host) - Stopped/Paused PhoneSvc (Phone Service) - Running PIEServiceNew (Intel PROSet/Wireless Service) - Running ---pla (Performance Logs & Alerts) - Stopped/Paused PlugPlay (Plug and Play) - Running PolicyAgent (IPsec Policy Agent) - Running Power (Power) - Running ---PrintDeviceConfigurationService (Print Device Configuration Service) - Stopped/Paused ---PrintNotify (Printer Extensions and Notifications) - Stopped/Paused ---PrintScanBrokerService (PrintScanBrokerService) - Stopped/Paused ProfSvc (User Profile Service) - Running ---PushToInstall (Windows PushToInstall Service) - Stopped/Paused ---QWAVE (Quality Windows Audio Video Experience) - Stopped/Paused ---RasAuto (Remote Access Auto Connection Manager) - Stopped/Paused RasMan (Remote Access Connection Manager) - Running ---refsdedupsvc (ReFS Dedup Service) - Stopped/Paused ---RemoteAccess (Routing and Remote Access) - Stopped/Paused ---RemoteRegistry (Remote Registry) - Stopped/Paused ---RetailDemo (Retail Demo Service) - Stopped/Paused RmSvc (Radio Management Service) - Running RpcEptMapper (RPC Endpoint Mapper) - Running ---RpcLocator (Remote Procedure Call (RPC) Locator) - Stopped/Paused RpcSs (Remote Procedure Call (RPC)) - Running RtkAudioUniversalService (Realtek Audio Universal Service) - Running SamSs (Security Accounts Manager) - Running ---SCardSvr (Smart Card) - Stopped/Paused ---ScDeviceEnum (Smart Card Device Enumeration Service) - Stopped/Paused Schedule (Task Scheduler) - Running ---SCPolicySvc (Smart Card Removal Policy) - Stopped/Paused ---SDRSVC (Windows Backup) - Stopped/Paused ---seclogon (Secondary Logon) - Stopped/Paused SecurityHealthService (Windows Security Service) - Running ---SEMgrSvc (Payments and NFC/SE Manager) - Stopped/Paused SENS (System Event Notification Service) - Running ---SensorDataService (Sensor Data Service) - Stopped/Paused SensorService (Sensor Service) - Running SensrSvc (Sensor Monitoring Service) - Running ---SessionEnv (Remote Desktop Configuration) - Stopped/Paused ---SharedAccess (Internet Connection Sharing (ICS)) - Stopped/Paused ShellHWDetection (Shell Hardware Detection) - Running ---shpamsvc (Shared PC Account Manager) - Stopped/Paused ---smphost (Microsoft Storage Spaces SMP) - Stopped/Paused ---SmsRouter (Microsoft Windows SMS Router Service.) - Stopped/Paused ---SNMPTrap (SNMP Trap) - Stopped/Paused Spooler (Print Spooler) - Running ---sppsvc (Software Protection) - Stopped/Paused SSDPSRV (SSDP Discovery) - Running ---ssh-agent (OpenSSH Authentication Agent) - Stopped/Paused SstpSvc (Secure Socket Tunneling Protocol Service) - Running StateRepository (State Repository Service) - Running Steam Client Service (Steam Client Service) - Running StiSvc (Windows Image Acquisition (WIA)) - Running StorSvc (Storage Service) - Running ---svsvc (Spot Verifier) - Stopped/Paused ---swprv (Microsoft Software Shadow Copy Provider) - Stopped/Paused SysMain (SysMain) - Running SystemEventsBroker (System Events Broker) - Running TapiSrv (Telephony) - Running ---TermService (Remote Desktop Services) - Stopped/Paused TextInputManagementService (Text Input Management Service) - Running Themes (Themes) - Running ---TieringEngineService (Storage Tiers Management) - Stopped/Paused TimeBrokerSvc (Time Broker) - Running TokenBroker (Web Account Manager) - Running TrkWks (Distributed Link Tracking Client) - Running ---TroubleshootingSvc (Recommended Troubleshooting Service) - Stopped/Paused ---TrustedInstaller (Windows Modules Installer) - Stopped/Paused ---tzautoupdate (Auto Time Zone Updater) - Stopped/Paused ---UmRdpService (Remote Desktop Services UserMode Port Redirector) - Stopped/Paused ---upnphost (UPnP Device Host) - Stopped/Paused UserManager (User Manager) - Running UsoSvc (Update Orchestrator Service) - Running VaultSvc (Credential Manager) - Running ---vds (Virtual Disk) - Stopped/Paused ---vmicguestinterface (Hyper-V Guest Service Interface) - Stopped/Paused ---vmicheartbeat (Hyper-V Heartbeat Service) - Stopped/Paused ---vmickvpexchange (Hyper-V Data Exchange Service) - Stopped/Paused ---vmicrdv (Hyper-V Remote Desktop Virtualization Service) - Stopped/Paused ---vmicshutdown (Hyper-V Guest Shutdown Service) - Stopped/Paused ---vmictimesync (Hyper-V Time Synchronization Service) - Stopped/Paused ---vmicvmsession (Hyper-V PowerShell Direct Service) - Stopped/Paused ---vmicvss (Hyper-V Volume Shadow Copy Requestor) - Stopped/Paused ---VSS (Volume Shadow Copy) - Stopped/Paused W32Time (Windows Time) - Running ---WaaSMedicSvc (WaaSMedicSvc) - Stopped/Paused ---WalletService (WalletService) - Stopped/Paused ---WarpJITSvc (Warp JIT Service) - Stopped/Paused ---wbengine (Block Level Backup Engine Service) - Stopped/Paused ---WbioSrvc (Windows Biometric Service) - Stopped/Paused Wcmsvc (Windows Connection Manager) - Running ---wcncsvc (Windows Connect Now - Config Registrar) - Stopped/Paused ---WdiServiceHost (Diagnostic Service Host) - Stopped/Paused WdiSystemHost (Diagnostic System Host) - Running WdNisSvc (Microsoft Defender Antivirus Network Inspection Service) - Running ---WebClient (WebClient) - Stopped/Paused webthreatdefsvc (Web Threat Defense Service) - Running ---Wecsvc (Windows Event Collector) - Stopped/Paused ---WEPHOSTSVC (Windows Encryption Provider Host Service) - Stopped/Paused ---wercplsupport (Problem Reports Control Panel Support) - Stopped/Paused ---WerSvc (Windows Error Reporting Service) - Stopped/Paused ---WFDSConMgrSvc (Wi-Fi Direct Services Connection Manager Service) - Stopped/Paused whesvc (Windows Health and Optimized Experiences) - Running ---WiaRpc (Still Image Acquisition Events) - Stopped/Paused WinDefend (Microsoft Defender Antivirus Service) - Running WinHttpAutoProxySvc (WinHTTP Web Proxy Auto-Discovery Service) - Running Winmgmt (Windows Management Instrumentation) - Running ---WinRM (Windows Remote Management (WS-Management)) - Stopped/Paused ---wisvc (Windows Insider Service) - Stopped/Paused WlanSvc (WLAN AutoConfig) - Running ---wlidsvc (Microsoft Account Sign-in Assistant) - Stopped/Paused ---wlpasvc (Local Profile Assistant Service) - Stopped/Paused ---WManSvc (Windows Management Service) - Stopped/Paused ---wmiApSrv (WMI Performance Adapter) - Stopped/Paused WMIRegistrationService (Intel(R) Management Engine WMI Provider Registration) - Running ---WMPNetworkSvc (Windows Media Player Network Sharing Service) - Stopped/Paused ---workfolderssvc (Work Folders) - Stopped/Paused ---WpcMonSvc (Parental Controls) - Stopped/Paused ---WPDBusEnum (Portable Device Enumerator Service) - Stopped/Paused WpnService (Windows Push Notifications System Service) - Running WSAIFabricSvc (WSAIFabricSvc) - Running wscsvc (Security Center) - Running WSearch (Windows Search) - Running wuauserv (Windows Update) - Running ---wuqisvc (Microsoft Usage and Quality Insights) - Stopped/Paused ---WwanSvc (WWAN AutoConfig) - Stopped/Paused XblAuthManager (Xbox Live Auth Manager) - Running ---XblGameSave (Xbox Live Game Save) - Stopped/Paused ---XboxGipSvc (Xbox Accessory Management Service) - Stopped/Paused ---XboxNetApiSvc (Xbox Live Networking Service) - Stopped/Paused ---AarSvc_95f30 (Agent Activation Runtime_95f30) - Stopped/Paused ---BcastDVRUserService_95f30 (GameDVR and Broadcast User Service_95f30) - Stopped/Paused BluetoothUserService_95f30 (Bluetooth User Support Service_95f30) - Running ---CaptureService_95f30 (CaptureService_95f30) - Stopped/Paused cbdhsvc_95f30 (Clipboard User Service_95f30) - Running CDPUserSvc_95f30 (Connected Devices Platform User Service_95f30) - Running ---CloudBackupRestoreSvc_95f30 (Cloud Backup and Restore Service_95f30) - Stopped/Paused ---ConsentUxUserSvc_95f30 (ConsentUX User Service_95f30) - Stopped/Paused ---CredentialEnrollmentManagerUserSvc_95f30 (CredentialEnrollmentManagerUserSvc_95f30) - Stopped/Paused ---DeviceAssociationBrokerSvc_95f30 (DeviceAssociationBroker_95f30) - Stopped/Paused ---DevicePickerUserSvc_95f30 (DevicePicker_95f30) - Stopped/Paused DevicesFlowUserSvc_95f30 (DevicesFlow_95f30) - Running ---MessagingService_95f30 (MessagingService_95f30) - Stopped/Paused NPSMSvc_95f30 (Now Playing Session Manager Service_95f30) - Running OneSyncSvc_95f30 (Sync Host_95f30) - Running ---P9RdrService_95f30 (P9RdrService_95f30) - Stopped/Paused PenService_95f30 (PenService_95f30) - Running ---PimIndexMaintenanceSvc_95f30 (Contact Data_95f30) - Stopped/Paused ---PrintWorkflowUserSvc_95f30 (PrintWorkflow_95f30) - Stopped/Paused UdkUserSvc_95f30 (Udk User Service_95f30) - Running ---UnistoreSvc_95f30 (User Data Storage_95f30) - Stopped/Paused ---UserDataSvc_95f30 (User Data Access_95f30) - Stopped/Paused webthreatdefusersvc_95f30 (Web Threat Defense User Service_95f30) - Running *WpnUserService_95f30 (Windows Push Notifications User Service_95f30) - Running Loaded Modules: [With ToolHelp32] -00400000 <RAW> : C:\Users\[username]\Desktop\ssp\ssp.exe 2.7.40.3000 - SSP (C) D-EXCLAMATION / SSP BUGTRAQ -07be0000 <CMP> : C:\Users\[username]\Desktop\ssp\plugin\shared_value\shared_value.dll 1.0.0.0 - Shared Value Plugin Copyright (C) CSaori Project -07fb0000 <RAW> : C:\Users\[username]\Desktop\ssp\plugin\SAKNIFE\SAKNIFE.dll 1.5.3.0 - SwissArmyKnife (C) 2004 SSP BUGTRAQ -09c70000 <RAW> : C:\Users\[username]\Desktop\ssp\ghost\ssp_angel\ghost\master\yaya.dll 5.71.13.0 - yaya -10000000 <CMP> : C:\Users\[username]\Desktop\ssp\data\language\english\resource.dll 2.7.21.3 - Language Resource DLL (C) D-EXCLAMATION / SSP BUGTRAQ -13700000 <RAW> : C:\Users\[username]\Desktop\ssp\plugin\balloonselector\yaya.dll 5.71.3.0 - yaya -6e560000 <RAW> : C:\Windows\SYSTEM32\policymanager.dll 10.0.26100.7309 - Policy Manager DLL Microsoft Corporation. All rights reserved. -6e610000 <RAW> : C:\Windows\System32\OneCoreUAPCommonProxyStub.dll 10.0.26100.7623 - OneCoreUAP Common Proxy Stub Microsoft Corporation. All rights reserved. -6e8a0000 <RAW> : C:\Windows\System32\LocationApi.dll 10.0.26100.7309 - Microsoft Windows Location API Microsoft Corporation. All rights reserved. -6e900000 <RAW> : C:\Windows\System32\deviceaccess.dll 10.0.26100.7309 - Device Broker And Policy COM Server Microsoft Corporation. All rights reserved. -6e940000 <RAW> : C:\Windows\System32\PortableDeviceTypes.dll 10.0.26100.5074 - Windows Portable Device (Parameter) Types Component Microsoft Corporation. All rights reserved. -6e970000 <RAW> : C:\Windows\System32\SensorsNativeApi.V2.dll 10.0.26100.7309 - Sensors Native API (V2 stack) Microsoft Corporation. All rights reserved. -6e9c0000 <RAW> : C:\Windows\System32\SensorsApi.dll 10.0.26100.7309 - Sensor API Microsoft Corporation. All rights reserved. -6ea50000 <RAW> : \\?\C:\Windows\UUS\Packages\Preview\X86\wupscore.dll 1506.2511.3032.0 - Windows Update client proxy stub Microsoft Corporation. All rights reserved. -6ea80000 <RAW> : \\?\C:\Windows\UUS\Packages\Preview\X86\wuapicore.dll 1506.2511.3032.0 - Windows Update Client API Microsoft Corporation. All rights reserved. -6eb80000 <RAW> : C:\Windows\uus\packages\preview\X86\uusbrain.dll 1506.2511.3032.0 - Undocked Update Stack Brain Microsoft Corporation. All rights reserved. -6ebe0000 <RAW> : C:\Windows\system32\d2d1.dll 10.0.26100.7623 - Microsoft D2D Library Microsoft Corporation. All rights reserved. -6fb80000 <RAW> : C:\Windows\SYSTEM32\sensorsnativeapi.dll 10.0.26100.7309 - Sensors Native API Microsoft Corporation. All rights reserved. -6fba0000 <RAW> : C:\Windows\SYSTEM32\ondemandconnroutehelper.dll 10.0.26100.7462 - On Demand Connctiond Route Helper Microsoft Corporation. All rights reserved. -6fbc0000 <RAW> : C:\Windows\System32\SensorsUtilsV2.dll 10.0.26100.7309 - Sensors v2 Utilities DLL Microsoft Corporation. All rights reserved. -6fbf0000 <RAW> : C:\Windows\System32\wups.dll 1451.2510.27012.0 - Windows Update client proxy stub Microsoft Corporation. All rights reserved. -6fc20000 <RAW> : C:\Windows\SYSTEM32\wusys.dll 10.0.26100.7309 - Windows Update System Library Microsoft Corporation. All rights reserved. -6fc60000 <RAW> : C:\Windows\System32\wuapi.dll 1451.2510.27012.0 - Windows Update Client API Microsoft Corporation. All rights reserved. -6fca0000 <RAW> : C:\Windows\SYSTEM32\UMPDC.dll 10.0.26100.7019 - User Mode Power Dependency Coordinator Microsoft Corporation. All rights reserved. -6fcc0000 <RAW> : C:\Windows\SYSTEM32\powrprof.dll 10.0.26100.3912 - Power Profile Helper DLL Microsoft Corporation. All rights reserved. -6fd20000 <RAW> : C:\Windows\system32\Ninput.dll 10.0.26100.7309 - Microsoft Pen and Touch Input Component Copyright (c) Microsoft Corp. All rights reserved -6fd90000 <RAW> : C:\Windows\system32\pdh.dll 10.0.26100.7309 - Windows Performance Data Helper DLL Microsoft Corporation. All rights reserved. -6fde0000 <RAW> : C:\Windows\System32\netprofm.dll 10.0.26100.7309 - Network List Manager Microsoft Corporation. All rights reserved. -6fe50000 <RAW> : C:\Windows\System32\ShellCommonCommonProxyStub.dll 10.0.26100.7309 - ShellCommon Common Proxy Stub Microsoft Corporation. All rights reserved. -6fee0000 <RAW> : C:\Windows\system32\explorerframe.dll 10.0.26100.7623 - ExplorerFrame Microsoft Corporation. All rights reserved. -70100000 <RAW> : C:\Windows\System32\ActXPrxy.dll 10.0.26100.7309 - ActiveX Interface Marshaling Library Microsoft Corporation. All rights reserved. -70140000 <RAW> : C:\Windows\System32\OneCoreCommonProxyStub.dll 10.0.26100.7309 - OneCore Common Proxy Stub Microsoft Corporation. All rights reserved. -701a0000 <RAW> : C:\Windows\system32\XmlLite.dll 10.0.26100.7309 - Microsoft XmlLite Library Microsoft Corporation. All rights reserved. -701e0000 <RAW> : C:\Windows\System32\twinapi.appcore.dll 10.0.26100.7623 - twinapi.appcore Microsoft Corporation. All rights reserved. -703d0000 <RAW> : C:\Windows\SYSTEM32\bcrypt.dll 10.0.26100.7623 - Windows Cryptographic Primitives Library Microsoft Corporation. All rights reserved. -70400000 <RAW> : C:\Windows\System32\npmproxy.dll 10.0.26100.7309 - Network List Manager Proxy Microsoft Corporation. All rights reserved. -70420000 <RAW> : C:\Windows\system32\dwmapi.dll 10.0.26100.7309 - Microsoft Desktop Window Manager API Microsoft Corporation. All rights reserved. -70450000 <RAW> : C:\Windows\system32\dataexchange.dll 10.0.26100.7309 - Data exchange Microsoft Corporation. All rights reserved. -704a0000 <RAW> : C:\Windows\SYSTEM32\WindowsCodecs.dll 10.0.26100.7623 - Microsoft Windows Codecs Library Microsoft Corporation. All rights reserved. -70690000 <RAW> : C:\Windows\system32\dwrite.dll 10.0.26100.7623 - Microsoft DirectX Typography Services Microsoft Corporation. All rights reserved. -708b0000 <RAW> : C:\Windows\SYSTEM32\TextShaping.dll 10.0.26100.7309 - Microsoft Text Shaping Library Microsoft Corporation. All rights reserved. -71cb0000 <RAW> : C:\Windows\SYSTEM32\QUARTZ.dll 10.0.26100.7309 - DirectShow Runtime. Microsoft Corporation. All rights reserved. -71e60000 <RAW> : C:\Windows\SYSTEM32\cscapi.dll 10.0.26100.1 - Offline Files Win32 API Microsoft Corporation. All rights reserved. -71e80000 <RAW> : C:\Windows\SYSTEM32\ntshrui.dll 10.0.26100.7623 - Shell extensions for sharing Microsoft Corporation. All rights reserved. -72010000 <RAW> : C:\Windows\SYSTEM32\CoreUIComponents.dll 10.0.26100.7623 - Microsoft Core UI Components Dll Microsoft Corporation. All rights reserved. -722b0000 <RAW> : C:\Windows\SYSTEM32\CoreMessaging.dll 10.0.26100.7623 - Microsoft CoreMessaging Dll Microsoft Corporation. All rights reserved. -72390000 <RAW> : C:\Windows\SYSTEM32\CRYPTBASE.dll 10.0.26100.7623 - Base cryptographic API DLL Microsoft Corporation. All rights reserved. -723a0000 <RAW> : C:\Windows\SYSTEM32\LINKINFO.dll 10.0.26100.1 - Windows Volume Tracking Microsoft Corporation. All rights reserved. -72410000 <RAW> : C:\Windows\SYSTEM32\textinputframework.dll 10.0.26100.7309 - "TextInputFramework.DYNLINK" Microsoft Corporation. All rights reserved. -72a00000 <RAW> : C:\Windows\SYSTEM32\WINNSI.DLL 10.0.26100.7623 - Network Store Information RPC interface Microsoft Corporation. All rights reserved. -72af0000 <RAW> : C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\X86\MpOav.dll 4.18.25110.6 - IOfficeAntiVirus Module Microsoft Corporation. All rights reserved. -72b80000 <RAW> : C:\Windows\SYSTEM32\USERENV.dll 10.0.26100.7309 - Userenv Microsoft Corporation. All rights reserved. -72bb0000 <RAW> : C:\Windows\system32\amsi.dll 10.0.26100.7309 - Anti-Malware Scan Interface Microsoft Corporation. All rights reserved. -72bd0000 <RAW> : C:\Windows\system32\wshunix.dll 10.0.26100.1 - AF_UNIX Winsock2 Helper DLL Microsoft Corporation. All rights reserved. -72be0000 <RAW> : C:\Windows\system32\twinapi.dll 10.0.26100.7623 - twinapi Microsoft Corporation. All rights reserved. -72d20000 <RAW> : C:\Windows\system32\es.dll 2001.12.10941.16384 - COM+ Microsoft Corporation. All rights reserved. -72d80000 <RAW> : C:\Windows\SYSTEM32\oledlg.dll 10.0.26100.7309 - OLE User Interface Support Microsoft Corporation. All rights reserved. -72dc0000 <RAW> : C:\Windows\system32\rsaenh.dll 10.0.26100.7019 - Microsoft Enhanced Cryptographic Provider Microsoft Corporation. All rights reserved. -72e00000 <RAW> : C:\Windows\SYSTEM32\CRYPTSP.dll 10.0.26100.7623 - Cryptographic Service Provider API Microsoft Corporation. All rights reserved. -72ee0000 <RAW> : C:\Windows\system32\wshbth.dll 10.0.26100.5074 - Windows Sockets Helper DLL Microsoft Corporation. All rights reserved. -72f00000 <RAW> : C:\Windows\system32\nlansp_c.dll 10.0.26100.7309 - NLA Namespace Service Provider DLL Microsoft Corporation. All rights reserved. -72f20000 <RAW> : C:\Windows\System32\winrnr.dll 10.0.26100.1882 - LDAP RnR Provider DLL Microsoft Corporation. All rights reserved. -72f60000 <RAW> : C:\Windows\SYSTEM32\DNSAPI.dll 10.0.26100.7309 - DNS Client API DLL Microsoft Corporation. All rights reserved. -73050000 <RAW> : C:\Windows\SYSTEM32\MSASN1.dll 10.0.26100.7623 - ASN.1 Runtime APIs Microsoft Corporation. All rights reserved. -73070000 <RAW> : C:\Windows\system32\mswsock.dll 10.0.26100.7309 - Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation. All rights reserved. -73150000 <RAW> : C:\Windows\system32\napinsp.dll 10.0.26100.1 - E-mail Naming Shim Provider Microsoft Corporation. All rights reserved. -731a0000 <RAW> : C:\Windows\system32\mlang.dll 10.0.26100.7019 - Multi Language Support DLL Microsoft Corporation. All rights reserved. -731e0000 <RAW> : C:\Windows\SYSTEM32\iphlpapi.dll 10.0.26100.7309 - IP Helper API Microsoft Corporation. All rights reserved. -732a0000 <RAW> : C:\Windows\system32\Oleacc.dll 7.2.26100.7309 - Active Accessibility Core Component Microsoft Corporation. All rights reserved. -73310000 <RAW> : C:\Windows\SYSTEM32\ntmarta.dll 10.0.26100.7019 - Windows NT MARTA provider Microsoft Corporation. All rights reserved. -73340000 <RAW> : C:\Windows\system32\uxtheme.dll 10.0.26100.7309 - Microsoft UxTheme Library Microsoft Corporation. All rights reserved. -73610000 <RAW> : C:\Windows\SYSTEM32\WINHTTP.dll 10.0.26100.7462 - Windows HTTP Services Microsoft Corporation. All rights reserved. -73720000 <RAW> : C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7309_none_b69e28a752454318\gdiplus.dll 10.0.26100.7309 - Microsoft GDI+ Microsoft Corporation. All rights reserved. -73a60000 <RAW> : C:\Windows\system32\wininet.dll 11.0.26100.7309 - Internet Extensions for Win32 Microsoft Corporation. All rights reserved. -73d80000 <RAW> : C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7623_none_85b5be99f7b06325\COMCTL32.dll 6.10.26100.7623 - User Experience Controls Library Microsoft Corporation. All rights reserved. -74160000 <RAW> : C:\Windows\SYSTEM32\SspiCli.dll 10.0.26100.7309 - Security Support Provider Interface Microsoft Corporation. All rights reserved. -741c0000 <RAW> : C:\Windows\SYSTEM32\srvcli.dll 10.0.26100.1 - Server Service Client DLL Microsoft Corporation. All rights reserved. -741f0000 <RAW> : C:\Windows\SYSTEM32\netutils.dll 10.0.26100.1882 - Net Win32 API Helpers DLL Microsoft Corporation. All rights reserved. -74200000 <RAW> : C:\Windows\SYSTEM32\iertutil.dll 11.0.26100.7623 - Run time utility for Internet Explorer Microsoft Corporation. All rights reserved. -74660000 <RAW> : C:\Windows\SYSTEM32\MSIMG32.dll 10.0.26100.1882 - GDIEXT Client DLL Microsoft Corporation. All rights reserved. -74670000 <RAW> : C:\Windows\SYSTEM32\WINMM.dll 10.0.26100.7309 - MCI API DLL Microsoft Corporation. All rights reserved. -746b0000 <RAW> : C:\Windows\SYSTEM32\VERSION.dll 10.0.26100.1 - Version Checking and File Installation Libraries Microsoft Corporation. All rights reserved. -746c0000 <RAW> : C:\Windows\SYSTEM32\CFGMGR32.dll 10.0.26100.7309 - Configuration Manager DLL Microsoft Corporation. All rights reserved. -74710000 <RAW> : C:\Windows\SYSTEM32\profapi.dll 10.0.26100.7309 - User Profile Basic API Microsoft Corporation. All rights reserved. -74730000 <RAW> : C:\Windows\System32\Windows.FileExplorer.Common.dll 10.0.26100.7623 - Windows.FileExplorer.Common Microsoft Corporation. All rights reserved. -747d0000 <RAW> : C:\Windows\SYSTEM32\PROPSYS.dll 7.0.26100.7623 - Microsoft Property System Microsoft Corporation. All rights reserved. -748b0000 <RAW> : C:\Windows\SYSTEM32\kernel.appcore.dll 10.0.26100.7309 - AppModel API Host Microsoft Corporation. All rights reserved. -748d0000 <RAW> : C:\Windows\SYSTEM32\Windows.Storage.dll 10.0.26100.7623 - Microsoft WinRT Storage API Microsoft Corporation. All rights reserved. -74fc0000 <RAW> : C:\Windows\System32\OLEAUT32.dll 10.0.26100.7309 - OLEAUT32.DLL Microsoft Corporation. All rights reserved. -75070000 <RAW> : C:\Windows\System32\ucrtbase.dll 10.0.26100.7623 - Microsoft C Runtime Library Microsoft Corporation. All rights reserved. -75190000 <RAW> : C:\Windows\System32\ole32.dll 10.0.26100.7623 - Microsoft OLE for Windows Microsoft Corporation. All rights reserved. -75470000 <RAW> : C:\Windows\System32\msvcp_win.dll 10.0.26100.7623 - Microsoft C Runtime Library Microsoft Corporation. All rights reserved. -75500000 <RAW> : C:\Windows\System32\win32u.dll 10.0.26100.7623 - Win32u Microsoft Corporation. All rights reserved. -75520000 <RAW> : C:\Windows\System32\RPCRT4.dll 10.0.26100.7623 - Remote Procedure Call Runtime Microsoft Corporation. All rights reserved. -755e0000 <RAW> : C:\Windows\System32\MSCTF.dll 10.0.26100.7623 - MSCTF Server DLL Microsoft Corporation. All rights reserved. -75770000 <RAW> : C:\Windows\System32\shcore.dll 10.0.26100.7623 - SHCORE Microsoft Corporation. All rights reserved. -75850000 <RAW> : C:\Windows\System32\WS2_32.dll 10.0.26100.7623 - Windows Socket 2.0 32-Bit DLL Microsoft Corporation. All rights reserved. -758c0000 <RAW> : C:\Windows\System32\SHLWAPI.dll 10.0.26100.7623 - Shell Light-weight Utility Library Microsoft Corporation. All rights reserved. -75920000 <RAW> : C:\Windows\System32\sechost.dll 10.0.26100.7623 - Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation. All rights reserved. -759b0000 <RAW> : C:\Windows\System32\WINTRUST.dll 10.0.26100.7309 - Microsoft Trust Verification APIs Microsoft Corporation. All rights reserved. -75a20000 <RAW> : C:\Windows\System32\KERNELBASE.dll 10.0.26100.7623 - Windows NT BASE API Client DLL Microsoft Corporation. All rights reserved. -75cf0000 <RAW> : C:\Windows\System32\clbcatq.dll 2001.12.10941.16384 - COM+ Configuration Catalog Microsoft Corporation. All rights reserved. -75e20000 <RAW> : C:\Windows\System32\bcryptPrimitives.dll 10.0.26100.7623 - Windows Cryptographic Primitives Library Microsoft Corporation. All rights reserved. -75ea0000 <RAW> : C:\Windows\System32\KERNEL32.DLL 10.0.26100.7623 - Windows NT BASE API Client DLL Microsoft Corporation. All rights reserved. -76010000 <RAW> : C:\Windows\System32\IMM32.DLL 10.0.26100.7309 - Multi-User Windows IMM32 API Client DLL Microsoft Corporation. All rights reserved. -76040000 <RAW> : C:\Windows\System32\SETUPAPI.dll 10.0.26100.7309 - Windows Setup API Microsoft Corporation. All rights reserved. -764a0000 <RAW> : C:\Windows\System32\NSI.dll 10.0.26100.7623 - NSI User-mode interface DLL Microsoft Corporation. All rights reserved. -764b0000 <RAW> : C:\Windows\System32\msvcrt.dll 7.0.26100.7623 - Windows NT CRT DLL Microsoft Corporation. All rights reserved. -76580000 <RAW> : C:\Windows\System32\wintypes.dll 10.0.26100.7623 - Windows Base Types DLL Microsoft Corporation. All rights reserved. -76680000 <RAW> : C:\Windows\System32\ADVAPI32.dll 10.0.26100.7309 - Advanced Windows 32 Base API Microsoft Corporation. All rights reserved. -76710000 <RAW> : C:\Windows\System32\combase.dll 10.0.26100.7623 - Microsoft COM for Windows Microsoft Corporation. All rights reserved. -769b0000 <RAW> : C:\Windows\System32\imagehlp.dll 10.0.26100.4202 - Windows NT Image Helper Microsoft Corporation. All rights reserved. -769d0000 <RAW> : C:\Windows\System32\CRYPT32.dll 10.0.26100.7309 - Crypto API32 Microsoft Corporation. All rights reserved. -76ae0000 <RAW> : C:\Windows\System32\GDI32.dll 10.0.26100.7309 - GDI Client DLL Microsoft Corporation. All rights reserved. -76b70000 <RAW> : C:\Windows\System32\gdi32full.dll 10.0.26100.7623 - GDI Client DLL Microsoft Corporation. All rights reserved. -76c60000 <RAW> : C:\Windows\System32\USER32.dll 10.0.26100.7623 - Multi-User Windows USER API Client DLL Microsoft Corporation. All rights reserved. -76e40000 <RAW> : C:\Windows\System32\SHELL32.dll 10.0.26100.7623 - Windows Shell Common Dll Microsoft Corporation. All rights reserved. -77470000 <RAW> : C:\Windows\System32\comdlg32.dll 10.0.26100.7623 - Common Dialogs DLL Microsoft Corporation. All rights reserved. -77530000 <RAW> : C:\Windows\System32\normaliz.dll 10.0.26100.1 - Unicode Normalization DLL Microsoft Corporation. All rights reserved. ==> -77550000 <RAW> : C:\Windows\SYSTEM32\ntdll.dll 10.0.26100.7623 - NT Layer DLL Microsoft Corporation. All rights reserved. Registers: EAX 0986d800 EBX 0986dd70 ECX 00000006 EDX 09870000 ESI 0986dc2c EDI 0986d850 DS 002b ES 9af002b FS 480053 GS 986002b SS/ESP/EBP 9af002b/0986d7e0/0986db78 CS/EIP 480023/7761552b EFlags 00000246 (Parity,Zero,Interrupt) Stack Dump: 0097df10 0986dc2c 09af7f90 0982b000 09870000 09870000 0982b000 5989414e c0000029 00000001 0986d850 7761552b 00000000 b8ce94cc 9cd2c678 c3aee0c2 becca6da 6db0d180 794e6088 c69e647a 4f67b4a2 c13c58b5 8a7d446a b2d8ad70 9d213966 60b12e59 b9eeb33e 6f14574d c0000027 00000002 00000000 00909410 00000000 fffffffe 0986d8ac 775e0a85 00000250 00000258 fffffffe 00000000 0986dbf8 0986d8a8 775e443b 02a00258 775a30a9 02a00000 00000002 000001e8 00010007 0000003d 0986da1c 775a2b1a 775a2f5e fc9b58af 000001e0 00000000 02a00000 09907808 0986d8b8 09907808 0986d90c 775d1b70 827b590b fffffffe CallStack Trace: 00 : 7761552b/000c452b <RAW> [0986dc2c,00909410,00000000,00000000] @ ntdll.dll (RtlCaptureStackContext->0x10f6b) 01 : 00909410/00508410 <RAW> [0986dc2c,0048580f,09af7f90,00000001] @ ssp.exe (_global_unwind2 009093f8 f libcmt:exsup.obj->0x18) 02 : 0090bddc/0050addc <RAW> [09af7f90,09b48e58,0a860000,09907808] @ ssp.exe (longjmp 0090bdc4 f libcmt:longjmp.obj->0x18) 03 : 004ccdf9/000cbdf9 <RAW> [000000e0,775e0bb7,0990782c,02a00000] @ ssp.exe (JLibPNG::ReadFromBufferFunc->0x2f9) 04 : 775e0a26/0008fa26 <RAW> [00000000,fc9b5fbf,0990782c,0000006d] @ ntdll.dll (RtlGetSystemTimeAndBias->0x546) 05 : 7758f6f9/0003e6f9 <RAW> [02a00000,00000000,000000e0,0990782c] @ ntdll.dll (RtlAllocateHeap->0xa9) 06 : 009097bb/005087bb <RAW> [0a860000,00052769,09b4dc38,00000001] @ ssp.exe (_heap_alloc 009096ce f libcmt:malloc.obj->0xed) 07 : 004ca222/000c9222 <RAW> [0a860000,00052769,09b4dc38,00000001] @ ssp.exe (JLibGraphics::ReadFromBuffer->0x22) 08 : 004cb28f/000ca28f <RAW> [09907808,00052769,09b4dc38,00000001] @ ssp.exe (JLibGra::ReadFromBufferFunc->0x1af) 09 : 004ca222/000c9222 <RAW> [0a860000,00052769,09b4dc38,00000001] @ ssp.exe (JLibGraphics::ReadFromBuffer->0x22) 10 : 004ca1bd/000c91bd <RAW> [09b4dc38,00000001,074f6630,0986e10c] @ ssp.exe (JLibGraphics::Read->0xad) 11 : 00623f7c/00222f7c <RAW> [0986e0d4,00000001,074f6630,0986e10c] @ ssp.exe (SPSurface::CreateSurfaceReal->0x6c) 12 : 00623e9d/00222e9d <RAW> [0986e2b0,fffffffb,0986e10c,00000001] @ ssp.exe (SPSurface::CreateSurface->0xad) 13 : 0062489a/0022389a <RAW> [0986e68c,074f6630,00000001,00000000] @ ssp.exe (SPSurface::Create->0x21a) 14 : 0050f16b/0010e16b <RAW> [0986e68c,0986e564,00000001,00000000] @ ssp.exe (SPSurface::Create->0x2b) 15 : 0061fa63/0021ea63 <RAW> [0099ba64,0986ea5c,ffffffff,0986ea20] @ ssp.exe (SPSurfaceManager::Load->0xa43) 16 : 005d820c/001d720c <RAW> [074f6dd8,0986ea5c,0986ea20,00000000] @ ssp.exe (SPSeriko::LoadSurface->0x1c) 17 : 005cdaaf/001ccaaf <RAW> [074f6dd8,0986ea5c,00000000,00000000] @ ssp.exe (SPSeriko::LoadSurfaceOld->0x9f) 18 : 005cdfe4/001ccfe4 <RAW> [0986f3b0,09b5a660,00000001,09b59b5c] @ ssp.exe (SPSeriko::LoadSurfacePicts->0x2d4) 19 : 00544a4b/00143a4b <RAW> [09b5a660,fa040001,00000000,09b586a8] @ ssp.exe (SPGhost::LoadShell->0x3db) 20 : 00543f42/00142f42 <RAW> [0986f9ac,fa040001,00000006,07489474] @ ssp.exe (SPGhost::LoadGhost->0xa92) 21 : 00605874/00204874 <RAW> [09b586a8,fa040001,04423678,07489474] @ ssp.exe (SPScriptPlayer::LoadGhost->0xe4) 22 : 0056d4a8/0016c4a8 <RAW> [00489474,04338b28,07489474,00000000] @ ssp.exe (SPGhostLoader::GhostLoadProcSub->0x108) 23 : 0056d355/0016c355 <RAW> [00489474,75ebb200,02a0a2e0,00008001] @ ssp.exe (SPGhostLoader::GhostLoadProc->0x225) 24 : 0056d09f/0016c09f <RAW> [0090de9d,043c3a90,043c3a90,043c3a90] @ ssp.exe (SPGhostLoader::Loop->0x5f) 25 : 004e500d/000e400d <RAW> [07487e20,0090de9d,0090de9d,043c3a90] @ ssp.exe (JWinThread::SetInterval->0xfd) 26 : 0090df26/0050cf26 <RAW> [043c3a90,75eb5d30,0986ffdc,775bd5db] @ ssp.exe (_beginthreadex 0090de32 f libcmt:threadex.obj->0xf4) 27 : 75eb5d49/00005d49 <RAW> [043c3a90,fc9b7d6f,00000000,00000000] @ KERNEL32.DLL (BaseThreadInitThunk->0x19) 28 : 775bd5db/0006c5db <RAW> [ffffffff,776044b1,00000000,00000000] @ ntdll.dll (RtlInitializeExceptionChain->0x6b) 29 : 775bd561/0006c561 <RAW> [0090de9d,043c3a90,00000000,f71f42d4] @ ntdll.dll (RtlGetAppContainerNamedObjectPath->0x231) Total StackDepth : 30 STACKTRC.TXT (84,503 bytes)

guest 2026-01-21 18:39 reporter ~0001686	Additional info: extracting frames from the .apng of the ghost and remaking it again through a different editor seems to avoid the crash. The .apng surface exists purely for compatibility with Ghost Captor Sakura, and originally made with ezgif. Remaking the image in ezgif again still results in SSP crashing. Attaching the problem image. SSP/2.7.41 Windows 11 25H2 surface0.apng (368,957 bytes)

ponapalt 2026-01-22 10:12 administrator ~0001687	2.7.42

Date Modified	Username	Field	Change
2026-01-21 16:13	guest	New Issue
2026-01-21 16:13	guest	File Added: STACKTRC.TXT
2026-01-21 18:39	guest	Note Added: 0001686
2026-01-21 18:39	guest	File Added: surface0.apng
2026-01-22 10:12	ponapalt	Assigned To	=> ponapalt
2026-01-22 10:12	ponapalt	Status	new => closed
2026-01-22 10:12	ponapalt	Resolution	open => fixed
2026-01-22 10:12	ponapalt	Fixed in Version	=> 2.7 (リリース)
2026-01-22 10:12	ponapalt	Note Added: 0001687