API tools faq
paste
Guest User

Untitled

a guest
Dec 18th, 2018
1,043
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 271.91 KB | None | 0 0
raw download clone embed print report
  1. KProcessHacker: Windows 10.0, SP0.0, build 17763
  2. KProcessHacker: ExfUnblockPushLock: 0xfffff80708a4eeb0
  3. KProcessHacker: ObGetObjectType: 0xfffff80708eb4c30
  4. KProcessHacker: PsAcquireProcessExitSynchronization: 0xfffff80708ea2000
  5. KProcessHacker: PsIsProtectedProcess: 0xfffff807088a6c70
  6. KProcessHacker: PsReleaseProcessExitSynchronization: 0xfffff80708ea84b0
  7. KProcessHacker: PsResumeProcess: 0xfffff80708ea7990
  8. KProcessHacker: PsSuspendProcess: 0xfffff807090b1940
  9. KProcessHacker: Unable to query parameter DisableDynamicProcedureScan: 0xc0000034
  10. KProcessHacker: Driver loaded
  11. KProcessHacker: Client (PID 8044) is connecting
  12. KProcessHacker: ObQueryNameString: status 0x0
  13. KProcessHacker: KphQueryNameObject:
  14. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  15. KProcessHacker: ObQueryNameString: status 0x0
  16. KProcessHacker: KphQueryNameObject:
  17. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  18. KProcessHacker: ObQueryNameString: status 0x0
  19. KProcessHacker: KphQueryNameObject:
  20. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  21. KProcessHacker: ObQueryNameString: status 0x0
  22. KProcessHacker: KphQueryNameObject:
  23. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  24. KProcessHacker: ObQueryNameString: status 0x0
  25. KProcessHacker: KphQueryNameObject:
  26. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  27. KProcessHacker: ObQueryNameString: status 0x0
  28. KProcessHacker: KphQueryNameObject:
  29. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  30. KProcessHacker: ObQueryNameString: status 0x0
  31. KProcessHacker: KphQueryNameObject:
  32. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  33. KProcessHacker: ObQueryNameString: status 0x0
  34. KProcessHacker: KphQueryNameObject:
  35. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  36. KProcessHacker: ObQueryNameString: status 0x0
  37. KProcessHacker: KphQueryNameObject:
  38. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  39. KProcessHacker: ObQueryNameString: status 0x0
  40. KProcessHacker: KphQueryNameObject:
  41. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  42. KProcessHacker: ObQueryNameString: status 0x0
  43. KProcessHacker: KphQueryNameObject:
  44. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x548, ObjectInformationLength: 512, returnLength: 16
  45. KProcessHacker: ObQueryNameString: status 0x0
  46. KProcessHacker: KphQueryNameObject:
  47. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  48. KProcessHacker: ObQueryNameString: status 0x0
  49. KProcessHacker: KphQueryNameObject:
  50. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  51. KProcessHacker: ObQueryNameString: status 0x0
  52. KProcessHacker: KphQueryNameObject:
  53. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  54. KProcessHacker: ObQueryNameString: status 0x0
  55. KProcessHacker: KphQueryNameObject:
  56. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  57. KProcessHacker: ObQueryNameString: status 0x0
  58. KProcessHacker: KphQueryNameObject:
  59. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  60. KProcessHacker: ObQueryNameString: status 0x0
  61. KProcessHacker: KphQueryNameObject:
  62. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  63. KProcessHacker: ObQueryNameString: status 0x0
  64. KProcessHacker: KphQueryNameObject:
  65. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  66. KProcessHacker: ObQueryNameString: status 0x0
  67. KProcessHacker: KphQueryNameObject:
  68. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  69. KProcessHacker: ObQueryNameString: status 0x0
  70. KProcessHacker: KphQueryNameObject:
  71. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  72. KProcessHacker: ObQueryNameString: status 0x0
  73. KProcessHacker: KphQueryNameObject:
  74. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  75. KProcessHacker: ObQueryNameString: status 0x0
  76. KProcessHacker: KphQueryNameObject:
  77. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  78. KProcessHacker: ObQueryNameString: status 0x0
  79. KProcessHacker: KphQueryNameObject:
  80. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  81. KProcessHacker: ObQueryNameString: status 0x0
  82. KProcessHacker: KphQueryNameObject:
  83. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  84. KProcessHacker: ObQueryNameString: status 0x0
  85. KProcessHacker: KphQueryNameObject:
  86. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  87. KProcessHacker: ObQueryNameString: status 0x0
  88. KProcessHacker: KphQueryNameObject:
  89. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  90. KProcessHacker: ObQueryNameString: status 0x0
  91. KProcessHacker: KphQueryNameObject:
  92. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  93. KProcessHacker: ObQueryNameString: status 0x0
  94. KProcessHacker: KphQueryNameObject:
  95. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  96. KProcessHacker: ObQueryNameString: status 0x0
  97. KProcessHacker: KphQueryNameObject:
  98. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  99. KProcessHacker: ObQueryNameString: status 0x0
  100. KProcessHacker: KphQueryNameObject:
  101. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  102. KProcessHacker: ObQueryNameString: status 0x0
  103. KProcessHacker: KphQueryNameObject:
  104. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  105. KProcessHacker: ObQueryNameString: status 0x0
  106. KProcessHacker: KphQueryNameObject:
  107. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  108. KProcessHacker: ObQueryNameString: status 0x0
  109. KProcessHacker: KphQueryNameObject:
  110. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x550, ObjectInformationLength: 512, returnLength: 16
  111. KProcessHacker: ObQueryNameString: status 0x0
  112. KProcessHacker: KphQueryNameObject:
  113. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x544, ObjectInformationLength: 512, returnLength: 16
  114. KProcessHacker: ObQueryNameString: status 0x0
  115. KProcessHacker: KphQueryNameObject:
  116. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x540, ObjectInformationLength: 512, returnLength: 16
  117. KProcessHacker: ObQueryNameString: status 0x0
  118. KProcessHacker: KphQueryNameObject:
  119. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  120. KProcessHacker: ObQueryNameString: status 0x0
  121. KProcessHacker: KphQueryNameObject:
  122. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  123. KProcessHacker: ObQueryNameString: status 0x0
  124. KProcessHacker: KphQueryNameObject:
  125. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x588, ObjectInformationLength: 512, returnLength: 16
  126. KProcessHacker: ObQueryNameString: status 0x0
  127. KProcessHacker: KphQueryNameObject:
  128. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  129. KProcessHacker: ObQueryNameString: status 0x0
  130. KProcessHacker: KphQueryNameObject:
  131. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x588, ObjectInformationLength: 512, returnLength: 16
  132. KProcessHacker: ObQueryNameString: status 0x0
  133. KProcessHacker: KphQueryNameObject:
  134. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  135. KProcessHacker: ObQueryNameString: status 0x0
  136. KProcessHacker: KphQueryNameObject: \BaseNamedObjects\WmiProviderSubSystemHostJob
  137. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x588, ObjectInformationLength: 512, returnLength: 108
  138. KProcessHacker: ObQueryNameString: status 0x0
  139. KProcessHacker: KphQueryNameObject:
  140. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  141. KProcessHacker: ObQueryNameString: status 0x0
  142. KProcessHacker: KphQueryNameObject:
  143. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x588, ObjectInformationLength: 512, returnLength: 16
  144. KProcessHacker: ObQueryNameString: status 0x0
  145. KProcessHacker: KphQueryNameObject:
  146. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x570, ObjectInformationLength: 512, returnLength: 16
  147. KProcessHacker: ObQueryNameString: status 0x0
  148. KProcessHacker: KphQueryNameObject:
  149. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x588, ObjectInformationLength: 512, returnLength: 16
  150. KProcessHacker: ObQueryNameString: status 0x0
  151. KProcessHacker: KphQueryNameObject:
  152. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5dc, ObjectInformationLength: 512, returnLength: 16
  153. KProcessHacker: ObQueryNameString: status 0x0
  154. KProcessHacker: KphQueryNameObject:
  155. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5dc, ObjectInformationLength: 512, returnLength: 16
  156. KProcessHacker: ObQueryNameString: status 0x0
  157. KProcessHacker: KphQueryNameObject:
  158. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5e0, ObjectInformationLength: 512, returnLength: 16
  159. KProcessHacker: ObQueryNameString: status 0x0
  160. KProcessHacker: KphQueryNameObject:
  161. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5e4, ObjectInformationLength: 512, returnLength: 16
  162. KProcessHacker: ObQueryNameString: status 0x0
  163. KProcessHacker: KphQueryNameObject:
  164. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  165. KProcessHacker: ObQueryNameString: status 0x0
  166. KProcessHacker: KphQueryNameObject:
  167. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  168. KProcessHacker: ObQueryNameString: status 0x0
  169. KProcessHacker: KphQueryNameObject:
  170. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5ec, ObjectInformationLength: 512, returnLength: 16
  171. KProcessHacker: ObQueryNameString: status 0x0
  172. KProcessHacker: KphQueryNameObject:
  173. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5ec, ObjectInformationLength: 512, returnLength: 16
  174. KProcessHacker: ObQueryNameString: status 0x0
  175. KProcessHacker: KphQueryNameObject:
  176. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5ec, ObjectInformationLength: 512, returnLength: 16
  177. KProcessHacker: ObQueryNameString: status 0x0
  178. KProcessHacker: KphQueryNameObject:
  179. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  180. KProcessHacker: ObQueryNameString: status 0x0
  181. KProcessHacker: KphQueryNameObject:
  182. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x664, ObjectInformationLength: 512, returnLength: 16
  183. KProcessHacker: ObQueryNameString: status 0x0
  184. KProcessHacker: KphQueryNameObject:
  185. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  186. KProcessHacker: ObQueryNameString: status 0x0
  187. KProcessHacker: KphQueryNameObject:
  188. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  189. KProcessHacker: ObQueryNameString: status 0x0
  190. KProcessHacker: KphQueryNameObject:
  191. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  192. KProcessHacker: ObQueryNameString: status 0x0
  193. KProcessHacker: KphQueryNameObject:
  194. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  195. KProcessHacker: ObQueryNameString: status 0x0
  196. KProcessHacker: KphQueryNameObject:
  197. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5ec, ObjectInformationLength: 512, returnLength: 16
  198. KProcessHacker: ObQueryNameString: status 0x0
  199. KProcessHacker: KphQueryNameObject:
  200. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  201. KProcessHacker: ObQueryNameString: status 0x0
  202. KProcessHacker: KphQueryNameObject:
  203. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  204. KProcessHacker: ObQueryNameString: status 0x0
  205. KProcessHacker: KphQueryNameObject:
  206. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  207. KProcessHacker: ObQueryNameString: status 0x0
  208. KProcessHacker: KphQueryNameObject:
  209. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  210. KProcessHacker: ObQueryNameString: status 0x0
  211. KProcessHacker: KphQueryNameObject:
  212. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  213. KProcessHacker: ObQueryNameString: status 0x0
  214. KProcessHacker: KphQueryNameObject:
  215. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  216. KProcessHacker: ObQueryNameString: status 0x0
  217. KProcessHacker: KphQueryNameObject:
  218. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  219. KProcessHacker: ObQueryNameString: status 0x0
  220. KProcessHacker: KphQueryNameObject:
  221. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  222. KProcessHacker: ObQueryNameString: status 0x0
  223. KProcessHacker: KphQueryNameObject:
  224. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x660, ObjectInformationLength: 512, returnLength: 16
  225. KProcessHacker: ObQueryNameString: status 0x0
  226. KProcessHacker: KphQueryNameObject:
  227. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x65c, ObjectInformationLength: 512, returnLength: 16
  228. KProcessHacker: ObQueryNameString: status 0x0
  229. KProcessHacker: KphQueryNameObject: \BaseNamedObjects\WmiProviderSubSystemHostJob
  230. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x80c, ObjectInformationLength: 512, returnLength: 108
  231. KProcessHacker: ObQueryNameString: status 0x0
  232. KProcessHacker: KphQueryNameObject:
  233. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x844, ObjectInformationLength: 512, returnLength: 16
  234. KProcessHacker: ObQueryNameString: status 0x0
  235. KProcessHacker: KphQueryNameObject:
  236. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x844, ObjectInformationLength: 512, returnLength: 16
  237. KProcessHacker: ObQueryNameString: status 0x0
  238. KProcessHacker: KphQueryNameObject:
  239. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x808, ObjectInformationLength: 512, returnLength: 16
  240. KProcessHacker: ObQueryNameString: status 0x0
  241. KProcessHacker: KphQueryNameObject:
  242. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x844, ObjectInformationLength: 512, returnLength: 16
  243. KProcessHacker: ObQueryNameString: status 0x0
  244. KProcessHacker: KphQueryNameObject:
  245. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x844, ObjectInformationLength: 512, returnLength: 16
  246. KProcessHacker: ObQueryNameString: status 0x0
  247. KProcessHacker: KphQueryNameObject:
  248. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0x5ec, ObjectInformationLength: 512, returnLength: 16
  249. KProcessHacker: ObQueryNameString: status 0x0
  250. KProcessHacker: KphQueryNameObject:
  251. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000004, ObjectInformationLength: 512, returnLength: 16
  252. KProcessHacker: ObQueryNameString: status 0x0
  253. KProcessHacker: KphQueryNameObject:
  254. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000008, ObjectInformationLength: 512, returnLength: 16
  255. KProcessHacker: ObQueryNameString: status 0x0
  256. KProcessHacker: KphQueryNameObject: \KernelObjects\BcdSyncMutant
  257. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000000c, ObjectInformationLength: 512, returnLength: 74
  258. KProcessHacker: ObQueryNameString: status 0x0
  259. KProcessHacker: KphQueryNameObject:
  260. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000010, ObjectInformationLength: 512, returnLength: 16
  261. KProcessHacker: ObQueryNameString: status 0x0
  262. KProcessHacker: KphQueryNameObject: \GLOBAL??
  263. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000014, ObjectInformationLength: 512, returnLength: 36
  264. KProcessHacker: ObQueryNameString: status 0x0
  265. KProcessHacker: KphQueryNameObject: \KernelObjects\MemoryPartition0
  266. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000018, ObjectInformationLength: 512, returnLength: 80
  267. KProcessHacker: ObQueryNameString: status 0x0
  268. KProcessHacker: KphQueryNameObject: \KernelObjects
  269. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000001c, ObjectInformationLength: 512, returnLength: 46
  270. KProcessHacker: ObQueryNameString: status 0x0
  271. KProcessHacker: KphQueryNameObject: \KernelObjects\LowPagedPoolCondition
  272. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000020, ObjectInformationLength: 512, returnLength: 90
  273. KProcessHacker: ObQueryNameString: status 0x0
  274. KProcessHacker: KphQueryNameObject: \KernelObjects\HighPagedPoolCondition
  275. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000024, ObjectInformationLength: 512, returnLength: 92
  276. KProcessHacker: ObQueryNameString: status 0x0
  277. KProcessHacker: KphQueryNameObject: \KernelObjects\LowNonPagedPoolCondition
  278. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000028, ObjectInformationLength: 512, returnLength: 96
  279. KProcessHacker: ObQueryNameString: status 0x0
  280. KProcessHacker: KphQueryNameObject: \KernelObjects\HighNonPagedPoolCondition
  281. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000002c, ObjectInformationLength: 512, returnLength: 98
  282. KProcessHacker: ObQueryNameString: status 0x0
  283. KProcessHacker: KphQueryNameObject: \KernelObjects\LowMemoryCondition
  284. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000030, ObjectInformationLength: 512, returnLength: 84
  285. KProcessHacker: ObQueryNameString: status 0x0
  286. KProcessHacker: KphQueryNameObject: \KernelObjects\HighMemoryCondition
  287. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000034, ObjectInformationLength: 512, returnLength: 86
  288. KProcessHacker: ObQueryNameString: status 0x0
  289. KProcessHacker: KphQueryNameObject: \KernelObjects\LowCommitCondition
  290. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000038, ObjectInformationLength: 512, returnLength: 84
  291. KProcessHacker: ObQueryNameString: status 0x0
  292. KProcessHacker: KphQueryNameObject: \KernelObjects\HighCommitCondition
  293. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000003c, ObjectInformationLength: 512, returnLength: 86
  294. KProcessHacker: ObQueryNameString: status 0x0
  295. KProcessHacker: KphQueryNameObject: \KernelObjects\MaximumCommitCondition
  296. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000040, ObjectInformationLength: 512, returnLength: 92
  297. KProcessHacker: ObQueryNameString: status 0x0
  298. KProcessHacker: KphQueryNameObject: \KernelObjects\MemoryErrors
  299. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000044, ObjectInformationLength: 512, returnLength: 72
  300. KProcessHacker: ObQueryNameString: status 0x0
  301. KProcessHacker: KphQueryNameObject: \KernelObjects\PhysicalMemoryChange
  302. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000048, ObjectInformationLength: 512, returnLength: 88
  303. KProcessHacker: ObQueryNameString: status 0x0
  304. KProcessHacker: KphQueryNameObject:
  305. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000004c, ObjectInformationLength: 512, returnLength: 16
  306. KProcessHacker: ObQueryNameString: status 0x0
  307. KProcessHacker: KphQueryNameObject:
  308. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000050, ObjectInformationLength: 512, returnLength: 16
  309. KProcessHacker: ObQueryNameString: status 0x0
  310. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\hivelist
  311. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000054, ObjectInformationLength: 512, returnLength: 128
  312. KProcessHacker: ObQueryNameString: status 0x0
  313. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_0774&SUBSYS_197615AD&REV_00#4&bbf9765&0&0088#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}
  314. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000058, ObjectInformationLength: 512, returnLength: 238
  315. KProcessHacker: ObQueryNameString: status 0x0
  316. KProcessHacker: KphQueryNameObject: \REGISTRY
  317. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000005c, ObjectInformationLength: 512, returnLength: 36
  318. KProcessHacker: ObQueryNameString: status 0x0
  319. KProcessHacker: KphQueryNameObject:
  320. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000060, ObjectInformationLength: 512, returnLength: 16
  321. KProcessHacker: ObQueryNameString: status 0x0
  322. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Notifications
  323. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000064, ObjectInformationLength: 512, returnLength: 138
  324. KProcessHacker: ObQueryNameString: status 0x0
  325. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters
  326. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000068, ObjectInformationLength: 512, returnLength: 216
  327. KProcessHacker: ObQueryNameString: status 0x0
  328. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\LeapSecondInformation
  329. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000006c, ObjectInformationLength: 512, returnLength: 154
  330. KProcessHacker: ObQueryNameString: status 0x0
  331. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001
  332. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000070, ObjectInformationLength: 512, returnLength: 94
  333. KProcessHacker: ObQueryNameString: status 0x0
  334. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\Setup
  335. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000074, ObjectInformationLength: 512, returnLength: 78
  336. KProcessHacker: ObQueryNameString: status 0x0
  337. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power
  338. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000078, ObjectInformationLength: 512, returnLength: 122
  339. KProcessHacker: ObQueryNameString: status 0x0
  340. KProcessHacker: KphQueryNameObject: \PowerMonitorPort
  341. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000007c, ObjectInformationLength: 512, returnLength: 52
  342. KProcessHacker: ObQueryNameString: status 0x0
  343. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001
  344. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000080, ObjectInformationLength: 512, returnLength: 94
  345. KProcessHacker: ObQueryNameString: status 0x0
  346. KProcessHacker: KphQueryNameObject: \PowerPort
  347. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000084, ObjectInformationLength: 512, returnLength: 38
  348. KProcessHacker: ObQueryNameString: status 0x0
  349. KProcessHacker: KphQueryNameObject: \REGISTRY\USER
  350. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000088, ObjectInformationLength: 512, returnLength: 46
  351. KProcessHacker: ObQueryNameString: status 0x0
  352. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\DriverDatabase
  353. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000008c, ObjectInformationLength: 512, returnLength: 96
  354. KProcessHacker: ObQueryNameString: status 0x0
  355. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM
  356. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000090, ObjectInformationLength: 512, returnLength: 66
  357. KProcessHacker: ObQueryNameString: status 0x0
  358. KProcessHacker: KphQueryNameObject:
  359. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000094, ObjectInformationLength: 512, returnLength: 16
  360. KProcessHacker: ObQueryNameString: status 0x0
  361. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum
  362. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000098, ObjectInformationLength: 512, returnLength: 104
  363. KProcessHacker: ObQueryNameString: status 0x0
  364. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses
  365. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000009c, ObjectInformationLength: 512, returnLength: 138
  366. KProcessHacker: ObQueryNameString: status 0x0
  367. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses
  368. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000a0, ObjectInformationLength: 512, returnLength: 138
  369. KProcessHacker: ObQueryNameString: status 0x0
  370. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceContainers
  371. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000a4, ObjectInformationLength: 512, returnLength: 144
  372. KProcessHacker: ObQueryNameString: status 0x0
  373. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class
  374. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000a8, ObjectInformationLength: 512, returnLength: 122
  375. KProcessHacker: ObQueryNameString: status 0x0
  376. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DevicePanels
  377. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000ac, ObjectInformationLength: 512, returnLength: 136
  378. KProcessHacker: ObQueryNameString: status 0x0
  379. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services
  380. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000b0, ObjectInformationLength: 512, returnLength: 112
  381. KProcessHacker: ObQueryNameString: status 0x0
  382. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\HardwareConfig
  383. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000b4, ObjectInformationLength: 512, returnLength: 96
  384. KProcessHacker: ObQueryNameString: status 0x0
  385. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\PnP
  386. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000b8, ObjectInformationLength: 512, returnLength: 118
  387. KProcessHacker: ObQueryNameString: status 0x0
  388. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\Setup
  389. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000bc, ObjectInformationLength: 512, returnLength: 78
  390. KProcessHacker: ObQueryNameString: status 0x0
  391. KProcessHacker: KphQueryNameObject:
  392. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000c0, ObjectInformationLength: 512, returnLength: 16
  393. KProcessHacker: ObQueryNameString: status 0x0
  394. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Hardware Profiles
  395. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000c4, ObjectInformationLength: 512, returnLength: 130
  396. KProcessHacker: ObQueryNameString: status 0x0
  397. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_1000&DEV_0054&SUBSYS_197615AD&REV_01#4&2509f6e&0&00A8#{2accfe60-c130-11d2-b082-00a0c91efb8b}
  398. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000c8, ObjectInformationLength: 512, returnLength: 238
  399. KProcessHacker: ObQueryNameString: status 0x0
  400. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0
  401. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000cc, ObjectInformationLength: 512, returnLength: 146
  402. KProcessHacker: ObQueryNameString: status 0x0
  403. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\WMI\Security
  404. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000d0, ObjectInformationLength: 512, returnLength: 136
  405. KProcessHacker: ObQueryNameString: status 0x0
  406. KProcessHacker: KphQueryNameObject:
  407. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000d4, ObjectInformationLength: 512, returnLength: 16
  408. KProcessHacker: ObQueryNameString: status 0x0
  409. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\RNG
  410. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000d8, ObjectInformationLength: 512, returnLength: 74
  411. KProcessHacker: ObQueryNameString: status 0x0
  412. KProcessHacker: KphQueryNameObject:
  413. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000dc, ObjectInformationLength: 512, returnLength: 16
  414. KProcessHacker: ObQueryNameString: status 0x0
  415. KProcessHacker: KphQueryNameObject:
  416. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000e0, ObjectInformationLength: 512, returnLength: 16
  417. KProcessHacker: ObQueryNameString: status 0x0
  418. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 0
  419. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000e4, ObjectInformationLength: 512, returnLength: 146
  420. KProcessHacker: ObQueryNameString: status 0x0
  421. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCIIDE#IDEChannel#4&23686003&0&1#{2accfe60-c130-11d2-b082-00a0c91efb8b}
  422. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000e8, ObjectInformationLength: 512, returnLength: 180
  423. KProcessHacker: ObQueryNameString: status 0x0
  424. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\HardwareConfig\{49bf4d56-dead-da4b-02c2-6c4f87825323}\ProductIds
  425. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000ec, ObjectInformationLength: 512, returnLength: 196
  426. KProcessHacker: ObQueryNameString: status 0x0
  427. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#FixedButton#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857}
  428. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000f0, ObjectInformationLength: 512, returnLength: 172
  429. KProcessHacker: ObQueryNameString: status 0x0
  430. KProcessHacker: KphQueryNameObject: \clfs
  431. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000f4, ObjectInformationLength: 512, returnLength: 28
  432. KProcessHacker: ObQueryNameString: status 0x0
  433. KProcessHacker: KphQueryNameObject: \clfs
  434. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000f8, ObjectInformationLength: 512, returnLength: 28
  435. KProcessHacker: ObQueryNameString: status 0x0
  436. KProcessHacker: KphQueryNameObject: \clfs
  437. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800000fc, ObjectInformationLength: 512, returnLength: 28
  438. KProcessHacker: ObQueryNameString: status 0x0
  439. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume1\$Extend\$RmMetadata\$Txf
  440. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000100, ObjectInformationLength: 512, returnLength: 114
  441. KProcessHacker: ObQueryNameString: status 0x0
  442. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem
  443. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000104, ObjectInformationLength: 512, returnLength: 132
  444. KProcessHacker: ObQueryNameString: status 0x0
  445. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  446. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000108, ObjectInformationLength: 512, returnLength: 110
  447. KProcessHacker: ObQueryNameString: status 0x0
  448. KProcessHacker: KphQueryNameObject:
  449. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000010c, ObjectInformationLength: 512, returnLength: 16
  450. KProcessHacker: ObQueryNameString: status 0x0
  451. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings
  452. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000110, ObjectInformationLength: 512, returnLength: 158
  453. KProcessHacker: ObQueryNameString: status 0x0
  454. KProcessHacker: KphQueryNameObject: \SeRmCommandPort
  455. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000114, ObjectInformationLength: 512, returnLength: 50
  456. KProcessHacker: ObQueryNameString: status 0x0
  457. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dfsc\Parameters
  458. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000118, ObjectInformationLength: 512, returnLength: 144
  459. KProcessHacker: ObQueryNameString: status 0x0
  460. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Lsa
  461. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000011c, ObjectInformationLength: 512, returnLength: 118
  462. KProcessHacker: ObQueryNameString: status 0x0
  463. KProcessHacker: KphQueryNameObject: \UniqueInteractiveSessionIdEvent
  464. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000120, ObjectInformationLength: 512, returnLength: 82
  465. KProcessHacker: ObQueryNameString: status 0x0
  466. KProcessHacker: KphQueryNameObject:
  467. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000124, ObjectInformationLength: 512, returnLength: 16
  468. KProcessHacker: ObQueryNameString: status 0x0
  469. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  470. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000128, ObjectInformationLength: 512, returnLength: 110
  471. KProcessHacker: ObQueryNameString: status 0x0
  472. KProcessHacker: KphQueryNameObject: \Device\Mup
  473. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000012c, ObjectInformationLength: 512, returnLength: 40
  474. KProcessHacker: ObQueryNameString: status 0x0
  475. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  476. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000130, ObjectInformationLength: 512, returnLength: 110
  477. KProcessHacker: ObQueryNameString: status 0x0
  478. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Lsa
  479. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000134, ObjectInformationLength: 512, returnLength: 118
  480. KProcessHacker: ObQueryNameString: status 0x0
  481. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  482. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000138, ObjectInformationLength: 512, returnLength: 110
  483. KProcessHacker: ObQueryNameString: status 0x0
  484. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\vwififlt\State\Parameters\VWifiSettings
  485. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000013c, ObjectInformationLength: 512, returnLength: 192
  486. KProcessHacker: ObQueryNameString: status 0x0
  487. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  488. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000140, ObjectInformationLength: 512, returnLength: 110
  489. KProcessHacker: ObQueryNameString: status 0x0
  490. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\{7746D80F-97E0-4E26-9543-26B41FC22F79}\{A25AE4F2-1B96-4CED-8007-AA30E9B1A218}
  491. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000144, ObjectInformationLength: 512, returnLength: 266
  492. KProcessHacker: ObQueryNameString: status 0x0
  493. KProcessHacker: KphQueryNameObject:
  494. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000148, ObjectInformationLength: 512, returnLength: 16
  495. KProcessHacker: ObQueryNameString: status 0x0
  496. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\{7746D80F-97E0-4E26-9543-26B41FC22F79}\{59AEE675-B203-4D61-9A1F-04518A20F359}
  497. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000014c, ObjectInformationLength: 512, returnLength: 266
  498. KProcessHacker: ObQueryNameString: status 0x0
  499. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#PNP0501#1#{4d36e978-e325-11ce-bfc1-08002be10318}
  500. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000150, ObjectInformationLength: 512, returnLength: 144
  501. KProcessHacker: ObQueryNameString: status 0x0
  502. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
  503. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000154, ObjectInformationLength: 512, returnLength: 200
  504. KProcessHacker: ObQueryNameString: status 0x0
  505. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\{7746D80F-97E0-4E26-9543-26B41FC22F79}\{D73E01AC-F5A0-4D80-928B-33C1920C38BA}
  506. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000158, ObjectInformationLength: 512, returnLength: 266
  507. KProcessHacker: ObQueryNameString: status 0x0
  508. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\{7746D80F-97E0-4E26-9543-26B41FC22F79}\{FB9F5B62-B48B-45F5-8586-E514958C92E2}
  509. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000015c, ObjectInformationLength: 512, returnLength: 266
  510. KProcessHacker: ObQueryNameString: status 0x0
  511. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\{7746D80F-97E0-4E26-9543-26B41FC22F79}\{221601AB-48C7-4970-B0EC-96E66F578407}
  512. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000160, ObjectInformationLength: 512, returnLength: 266
  513. KProcessHacker: ObQueryNameString: status 0x0
  514. KProcessHacker: KphQueryNameObject:
  515. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000164, ObjectInformationLength: 512, returnLength: 16
  516. KProcessHacker: ObQueryNameString: status 0x0
  517. KProcessHacker: KphQueryNameObject:
  518. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000168, ObjectInformationLength: 512, returnLength: 16
  519. KProcessHacker: ObQueryNameString: status 0x0
  520. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\TxR\{093539f2-b8b8-11e8-abe9-e41d2d0dac50}.TMContainer00000000000000000002.regtrans-ms
  521. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000016c, ObjectInformationLength: 512, returnLength: 286
  522. KProcessHacker: ObQueryNameString: status 0x0
  523. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\drivers\en-US\ntfs.sys.mui
  524. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000170, ObjectInformationLength: 512, returnLength: 152
  525. KProcessHacker: ObQueryNameString: status 0x0
  526. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
  527. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000174, ObjectInformationLength: 512, returnLength: 144
  528. KProcessHacker: ObQueryNameString: status 0x0
  529. KProcessHacker: KphQueryNameObject: \clfs
  530. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000178, ObjectInformationLength: 512, returnLength: 28
  531. KProcessHacker: ObQueryNameString: status 0x0
  532. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 2
  533. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000017c, ObjectInformationLength: 512, returnLength: 146
  534. KProcessHacker: ObQueryNameString: status 0x0
  535. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#vdrvroot#0000#{2e34d650-5819-42ca-84ae-d30803bae505}
  536. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000180, ObjectInformationLength: 512, returnLength: 152
  537. KProcessHacker: ObQueryNameString: status 0x0
  538. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCIIDE#IDEChannel#4&23686003&0&0#{2accfe60-c130-11d2-b082-00a0c91efb8b}
  539. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000184, ObjectInformationLength: 512, returnLength: 180
  540. KProcessHacker: ObQueryNameString: status 0x0
  541. KProcessHacker: KphQueryNameObject:
  542. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000188, ObjectInformationLength: 512, returnLength: 16
  543. KProcessHacker: ObQueryNameString: status 0x0
  544. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem
  545. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000018c, ObjectInformationLength: 512, returnLength: 132
  546. KProcessHacker: ObQueryNameString: status 0x0
  547. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#spaceport#0000#{ef66a56f-88d1-4cd8-98c4-49faf57ad8af}
  548. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000190, ObjectInformationLength: 512, returnLength: 154
  549. KProcessHacker: ObQueryNameString: status 0x0
  550. KProcessHacker: KphQueryNameObject: \PdcPort
  551. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000194, ObjectInformationLength: 512, returnLength: 34
  552. KProcessHacker: ObQueryNameString: status 0x0
  553. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00}\{0AABB002-A307-447e-9B81-1D819DF6C6D0}\{CE74AA52-A71A-4036-BEEF-B6C411010E28}
  554. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000198, ObjectInformationLength: 512, returnLength: 386
  555. KProcessHacker: ObQueryNameString: status 0x0
  556. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00}\{0DA965DC-8FCF-4c0b-8EFE-8DD5E7BC959A}\{7E01ADEF-81E6-4e1b-8075-56F373584694}
  557. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000019c, ObjectInformationLength: 512, returnLength: 386
  558. KProcessHacker: ObQueryNameString: status 0x0
  559. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00}\{8BC6262C-C026-411d-AE3B-7E2F70811A13}\{C072EEBB-1955-4fa9-B4BA-421E96E1D674}
  560. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001a0, ObjectInformationLength: 512, returnLength: 386
  561. KProcessHacker: ObQueryNameString: status 0x0
  562. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00}\{D4140C81-EBBA-4e60-8561-6918290359CD}\{35037BB4-9528-481d-8CB2-8FCC63A9DD81}
  563. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001a4, ObjectInformationLength: 512, returnLength: 386
  564. KProcessHacker: ObQueryNameString: status 0x0
  565. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00}\{EE1E4F72-E368-46b1-B3C6-5048B11C2DBD}\{9C1F0DBA-33E9-43af-9EDA-A607AA5139DA}
  566. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001a8, ObjectInformationLength: 512, returnLength: 386
  567. KProcessHacker: ObQueryNameString: status 0x0
  568. KProcessHacker: KphQueryNameObject:
  569. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001ac, ObjectInformationLength: 512, returnLength: 16
  570. KProcessHacker: ObQueryNameString: status 0x0
  571. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#spaceport#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b}
  572. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001b0, ObjectInformationLength: 512, returnLength: 154
  573. KProcessHacker: ObQueryNameString: status 0x0
  574. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00#4&bbf9765&0&2088#{2accfe60-c130-11d2-b082-00a0c91efb8b}
  575. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001b4, ObjectInformationLength: 512, returnLength: 238
  576. KProcessHacker: ObQueryNameString: status 0x0
  577. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#volmgr#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b}
  578. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001b8, ObjectInformationLength: 512, returnLength: 148
  579. KProcessHacker: ObQueryNameString: status 0x0
  580. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 1
  581. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001bc, ObjectInformationLength: 512, returnLength: 146
  582. KProcessHacker: ObQueryNameString: status 0x0
  583. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 4
  584. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001c0, ObjectInformationLength: 512, returnLength: 146
  585. KProcessHacker: ObQueryNameString: status 0x0
  586. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 3
  587. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001c4, ObjectInformationLength: 512, returnLength: 146
  588. KProcessHacker: ObQueryNameString: status 0x0
  589. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 5
  590. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001c8, ObjectInformationLength: 512, returnLength: 146
  591. KProcessHacker: ObQueryNameString: status 0x0
  592. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 6
  593. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001cc, ObjectInformationLength: 512, returnLength: 146
  594. KProcessHacker: ObQueryNameString: status 0x0
  595. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 7
  596. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001d0, ObjectInformationLength: 512, returnLength: 146
  597. KProcessHacker: ObQueryNameString: status 0x0
  598. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 8
  599. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001d4, ObjectInformationLength: 512, returnLength: 146
  600. KProcessHacker: ObQueryNameString: status 0x0
  601. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 9
  602. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001d8, ObjectInformationLength: 512, returnLength: 146
  603. KProcessHacker: ObQueryNameString: status 0x0
  604. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 10
  605. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001dc, ObjectInformationLength: 512, returnLength: 148
  606. KProcessHacker: ObQueryNameString: status 0x0
  607. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 11
  608. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001e0, ObjectInformationLength: 512, returnLength: 148
  609. KProcessHacker: ObQueryNameString: status 0x0
  610. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 12
  611. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001e4, ObjectInformationLength: 512, returnLength: 148
  612. KProcessHacker: ObQueryNameString: status 0x0
  613. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 13
  614. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001e8, ObjectInformationLength: 512, returnLength: 148
  615. KProcessHacker: ObQueryNameString: status 0x0
  616. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 14
  617. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001ec, ObjectInformationLength: 512, returnLength: 148
  618. KProcessHacker: ObQueryNameString: status 0x0
  619. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 15
  620. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001f0, ObjectInformationLength: 512, returnLength: 148
  621. KProcessHacker: ObQueryNameString: status 0x0
  622. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 16
  623. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001f4, ObjectInformationLength: 512, returnLength: 148
  624. KProcessHacker: ObQueryNameString: status 0x0
  625. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 17
  626. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001f8, ObjectInformationLength: 512, returnLength: 148
  627. KProcessHacker: ObQueryNameString: status 0x0
  628. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 18
  629. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800001fc, ObjectInformationLength: 512, returnLength: 148
  630. KProcessHacker: ObQueryNameString: status 0x0
  631. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 19
  632. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000200, ObjectInformationLength: 512, returnLength: 148
  633. KProcessHacker: ObQueryNameString: status 0x0
  634. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 20
  635. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000204, ObjectInformationLength: 512, returnLength: 148
  636. KProcessHacker: ObQueryNameString: status 0x0
  637. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 21
  638. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000208, ObjectInformationLength: 512, returnLength: 148
  639. KProcessHacker: ObQueryNameString: status 0x0
  640. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 22
  641. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000020c, ObjectInformationLength: 512, returnLength: 148
  642. KProcessHacker: ObQueryNameString: status 0x0
  643. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 23
  644. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000210, ObjectInformationLength: 512, returnLength: 148
  645. KProcessHacker: ObQueryNameString: status 0x0
  646. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 24
  647. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000214, ObjectInformationLength: 512, returnLength: 148
  648. KProcessHacker: ObQueryNameString: status 0x0
  649. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 25
  650. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000218, ObjectInformationLength: 512, returnLength: 148
  651. KProcessHacker: ObQueryNameString: status 0x0
  652. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 26
  653. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000021c, ObjectInformationLength: 512, returnLength: 148
  654. KProcessHacker: ObQueryNameString: status 0x0
  655. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 27
  656. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000220, ObjectInformationLength: 512, returnLength: 148
  657. KProcessHacker: ObQueryNameString: status 0x0
  658. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 28
  659. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000224, ObjectInformationLength: 512, returnLength: 148
  660. KProcessHacker: ObQueryNameString: status 0x0
  661. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 3\Scsi Bus 29
  662. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000228, ObjectInformationLength: 512, returnLength: 148
  663. KProcessHacker: ObQueryNameString: status 0x0
  664. KProcessHacker: KphQueryNameObject:
  665. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000022c, ObjectInformationLength: 512, returnLength: 16
  666. KProcessHacker: ObQueryNameString: status 0x0
  667. KProcessHacker: KphQueryNameObject: \GLOBAL??\STORAGE#Volume#{3f7c9d1e-ea19-11e8-a4a5-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
  668. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000230, ObjectInformationLength: 512, returnLength: 256
  669. KProcessHacker: ObQueryNameString: status 0x0
  670. KProcessHacker: KphQueryNameObject:
  671. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000234, ObjectInformationLength: 512, returnLength: 16
  672. KProcessHacker: ObQueryNameString: status 0x0
  673. KProcessHacker: KphQueryNameObject:
  674. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000238, ObjectInformationLength: 512, returnLength: 16
  675. KProcessHacker: ObQueryNameString: status 0x0
  676. KProcessHacker: KphQueryNameObject: \MicrosoftMalwareProtectionPortWD
  677. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000023c, ObjectInformationLength: 512, returnLength: 84
  678. KProcessHacker: ObQueryNameString: status 0x0
  679. KProcessHacker: KphQueryNameObject: \MicrosoftMalwareProtectionControlPortWD
  680. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000240, ObjectInformationLength: 512, returnLength: 98
  681. KProcessHacker: ObQueryNameString: status 0x0
  682. KProcessHacker: KphQueryNameObject: \MicrosoftMalwareProtectionVeryLowIoPortWD
  683. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000244, ObjectInformationLength: 512, returnLength: 102
  684. KProcessHacker: ObQueryNameString: status 0x0
  685. KProcessHacker: KphQueryNameObject: \MicrosoftMalwareProtectionRemoteIoPortWD
  686. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000248, ObjectInformationLength: 512, returnLength: 100
  687. KProcessHacker: ObQueryNameString: status 0x0
  688. KProcessHacker: KphQueryNameObject: \MicrosoftMalwareProtectionAsyncPortWD
  689. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000024c, ObjectInformationLength: 512, returnLength: 94
  690. KProcessHacker: ObQueryNameString: status 0x0
  691. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem
  692. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000250, ObjectInformationLength: 512, returnLength: 132
  693. KProcessHacker: ObQueryNameString: status 0x0
  694. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Policies
  695. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000254, ObjectInformationLength: 512, returnLength: 112
  696. KProcessHacker: ObQueryNameString: status 0x0
  697. KProcessHacker: KphQueryNameObject:
  698. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000258, ObjectInformationLength: 512, returnLength: 16
  699. KProcessHacker: ObQueryNameString: status 0x0
  700. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\Order
  701. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000025c, ObjectInformationLength: 512, returnLength: 154
  702. KProcessHacker: ObQueryNameString: status 0x0
  703. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NDIS\IfTypes\24
  704. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000260, ObjectInformationLength: 512, returnLength: 144
  705. KProcessHacker: ObQueryNameString: status 0x0
  706. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NDIS\IfTypes\71
  707. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000264, ObjectInformationLength: 512, returnLength: 144
  708. KProcessHacker: ObQueryNameString: status 0x0
  709. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder
  710. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000268, ObjectInformationLength: 512, returnLength: 170
  711. KProcessHacker: ObQueryNameString: status 0x0
  712. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Mup
  713. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000026c, ObjectInformationLength: 512, returnLength: 120
  714. KProcessHacker: ObQueryNameString: status 0x0
  715. KProcessHacker: KphQueryNameObject:
  716. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000270, ObjectInformationLength: 512, returnLength: 16
  717. KProcessHacker: ObQueryNameString: status 0x0
  718. KProcessHacker: KphQueryNameObject: \GLOBAL??\STORAGE#Volume#{3f7c9d1e-ea19-11e8-a4a5-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
  719. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000274, ObjectInformationLength: 512, returnLength: 256
  720. KProcessHacker: ObQueryNameString: status 0x0
  721. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\iorate
  722. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000278, ObjectInformationLength: 512, returnLength: 126
  723. KProcessHacker: ObQueryNameString: status 0x0
  724. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
  725. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000027c, ObjectInformationLength: 512, returnLength: 144
  726. KProcessHacker: ObQueryNameString: status 0x0
  727. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  728. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000280, ObjectInformationLength: 512, returnLength: 110
  729. KProcessHacker: ObQueryNameString: status 0x0
  730. KProcessHacker: KphQueryNameObject: \GLOBAL??\STORAGE#Volume#{3f7c9d1e-ea19-11e8-a4a5-806e6f6e6963}#0000000025700000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062}
  731. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000284, ObjectInformationLength: 512, returnLength: 256
  732. KProcessHacker: ObQueryNameString: status 0x0
  733. KProcessHacker: KphQueryNameObject: \Device\Harddisk0
  734. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000288, ObjectInformationLength: 512, returnLength: 52
  735. KProcessHacker: ObQueryNameString: status 0x0
  736. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001
  737. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000028c, ObjectInformationLength: 512, returnLength: 194
  738. KProcessHacker: ObQueryNameString: status 0x0
  739. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
  740. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000290, ObjectInformationLength: 512, returnLength: 194
  741. KProcessHacker: ObQueryNameString: status 0x0
  742. KProcessHacker: KphQueryNameObject: \GLOBAL??\SCSI#Disk&Ven_VMware_&Prod_VMware_Virtual_S#5&1ec51bf7&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
  743. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000294, ObjectInformationLength: 512, returnLength: 242
  744. KProcessHacker: ObQueryNameString: status 0x0
  745. KProcessHacker: KphQueryNameObject: \clfs
  746. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000298, ObjectInformationLength: 512, returnLength: 28
  747. KProcessHacker: ObQueryNameString: status 0x0
  748. KProcessHacker: KphQueryNameObject: \GLOBAL??\STORAGE#Volume#{3f7c9d1e-ea19-11e8-a4a5-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
  749. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000029c, ObjectInformationLength: 512, returnLength: 256
  750. KProcessHacker: ObQueryNameString: status 0x0
  751. KProcessHacker: KphQueryNameObject:
  752. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002a0, ObjectInformationLength: 512, returnLength: 16
  753. KProcessHacker: ObQueryNameString: status 0x0
  754. KProcessHacker: KphQueryNameObject:
  755. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002a4, ObjectInformationLength: 512, returnLength: 16
  756. KProcessHacker: ObQueryNameString: status 0x0
  757. KProcessHacker: KphQueryNameObject: \clfs
  758. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002a8, ObjectInformationLength: 512, returnLength: 28
  759. KProcessHacker: ObQueryNameString: status 0x0
  760. KProcessHacker: KphQueryNameObject: \clfs
  761. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002ac, ObjectInformationLength: 512, returnLength: 28
  762. KProcessHacker: ObQueryNameString: status 0x0
  763. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\$Extend\$RmMetadata\$Txf
  764. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002b0, ObjectInformationLength: 512, returnLength: 114
  765. KProcessHacker: ObQueryNameString: status 0x0
  766. KProcessHacker: KphQueryNameObject: \clfs
  767. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002b4, ObjectInformationLength: 512, returnLength: 28
  768. KProcessHacker: ObQueryNameString: status 0x0
  769. KProcessHacker: KphQueryNameObject: \clfs
  770. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002b8, ObjectInformationLength: 512, returnLength: 28
  771. KProcessHacker: ObQueryNameString: status 0x0
  772. KProcessHacker: KphQueryNameObject: \clfs
  773. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002bc, ObjectInformationLength: 512, returnLength: 28
  774. KProcessHacker: ObQueryNameString: status 0x0
  775. KProcessHacker: KphQueryNameObject:
  776. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002c0, ObjectInformationLength: 512, returnLength: 16
  777. KProcessHacker: ObQueryNameString: status 0x0
  778. KProcessHacker: KphQueryNameObject:
  779. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002c4, ObjectInformationLength: 512, returnLength: 16
  780. KProcessHacker: ObQueryNameString: status 0x0
  781. KProcessHacker: KphQueryNameObject:
  782. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002c8, ObjectInformationLength: 512, returnLength: 16
  783. KProcessHacker: ObQueryNameString: status 0x0
  784. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  785. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002cc, ObjectInformationLength: 512, returnLength: 110
  786. KProcessHacker: ObQueryNameString: status 0x0
  787. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  788. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002d0, ObjectInformationLength: 512, returnLength: 110
  789. KProcessHacker: ObQueryNameString: status 0x0
  790. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001
  791. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002d4, ObjectInformationLength: 512, returnLength: 194
  792. KProcessHacker: ObQueryNameString: status 0x0
  793. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
  794. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002d8, ObjectInformationLength: 512, returnLength: 194
  795. KProcessHacker: ObQueryNameString: status 0x0
  796. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  797. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002dc, ObjectInformationLength: 512, returnLength: 110
  798. KProcessHacker: ObQueryNameString: status 0x0
  799. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  800. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002e0, ObjectInformationLength: 512, returnLength: 110
  801. KProcessHacker: ObQueryNameString: status 0x0
  802. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  803. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002e4, ObjectInformationLength: 512, returnLength: 110
  804. KProcessHacker: ObQueryNameString: status 0x0
  805. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  806. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002e8, ObjectInformationLength: 512, returnLength: 110
  807. KProcessHacker: ObQueryNameString: status 0x0
  808. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  809. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002ec, ObjectInformationLength: 512, returnLength: 110
  810. KProcessHacker: ObQueryNameString: status 0x0
  811. KProcessHacker: KphQueryNameObject:
  812. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002f0, ObjectInformationLength: 512, returnLength: 16
  813. KProcessHacker: ObQueryNameString: status 0x0
  814. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e97d-e325-11ce-bfc1-08002be10318}\0128\Settings
  815. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002f4, ObjectInformationLength: 512, returnLength: 228
  816. KProcessHacker: ObQueryNameString: status 0x0
  817. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#PNP0501#1#{86e0d1e0-8089-11d0-9ce4-08003e301f73}
  818. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002f8, ObjectInformationLength: 512, returnLength: 144
  819. KProcessHacker: ObQueryNameString: status 0x0
  820. KProcessHacker: KphQueryNameObject:
  821. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800002fc, ObjectInformationLength: 512, returnLength: 16
  822. KProcessHacker: ObQueryNameString: status 0x0
  823. KProcessHacker: KphQueryNameObject:
  824. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000300, ObjectInformationLength: 512, returnLength: 16
  825. KProcessHacker: ObQueryNameString: status 0x0
  826. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e97d-e325-11ce-bfc1-08002be10318}\0128
  827. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000304, ObjectInformationLength: 512, returnLength: 210
  828. KProcessHacker: ObQueryNameString: status 0x0
  829. KProcessHacker: KphQueryNameObject:
  830. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000308, ObjectInformationLength: 512, returnLength: 16
  831. KProcessHacker: ObQueryNameString: status 0x0
  832. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SOFTWARE
  833. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000030c, ObjectInformationLength: 512, returnLength: 130
  834. KProcessHacker: ObQueryNameString: status 0x0
  835. KProcessHacker: KphQueryNameObject: \clfs
  836. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000310, ObjectInformationLength: 512, returnLength: 28
  837. KProcessHacker: ObQueryNameString: status 0x0
  838. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  839. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000314, ObjectInformationLength: 512, returnLength: 110
  840. KProcessHacker: ObQueryNameString: status 0x0
  841. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  842. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000318, ObjectInformationLength: 512, returnLength: 110
  843. KProcessHacker: ObQueryNameString: status 0x0
  844. KProcessHacker: KphQueryNameObject:
  845. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000031c, ObjectInformationLength: 512, returnLength: 16
  846. KProcessHacker: ObQueryNameString: status 0x0
  847. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control
  848. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000320, ObjectInformationLength: 512, returnLength: 110
  849. KProcessHacker: ObQueryNameString: status 0x0
  850. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\swenum\Notify
  851. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000324, ObjectInformationLength: 512, returnLength: 140
  852. KProcessHacker: ObQueryNameString: status 0x0
  853. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\bootstat.dat
  854. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000328, ObjectInformationLength: 512, returnLength: 106
  855. KProcessHacker: ObQueryNameString: status 0x0
  856. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\TxR\{093539f2-b8b8-11e8-abe9-e41d2d0dac50}.TMContainer00000000000000000001.regtrans-ms
  857. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000032c, ObjectInformationLength: 512, returnLength: 286
  858. KProcessHacker: ObQueryNameString: status 0x0
  859. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume2\EFI\Microsoft\Boot\BCD
  860. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000330, ObjectInformationLength: 512, returnLength: 110
  861. KProcessHacker: ObQueryNameString: status 0x0
  862. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\TxR\{093539f2-b8b8-11e8-abe9-e41d2d0dac50}.TM.blf
  863. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000334, ObjectInformationLength: 512, returnLength: 212
  864. KProcessHacker: ObQueryNameString: status 0x0
  865. KProcessHacker: KphQueryNameObject: \clfs
  866. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000338, ObjectInformationLength: 512, returnLength: 28
  867. KProcessHacker: ObQueryNameString: status 0x0
  868. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume2\EFI\Microsoft\Boot\BCD.LOG
  869. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000033c, ObjectInformationLength: 512, returnLength: 118
  870. KProcessHacker: ObQueryNameString: status 0x0
  871. KProcessHacker: KphQueryNameObject: \EFSInitEvent
  872. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000340, ObjectInformationLength: 512, returnLength: 44
  873. KProcessHacker: ObQueryNameString: status 0x0
  874. KProcessHacker: KphQueryNameObject: \Device\KsecDD
  875. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000344, ObjectInformationLength: 512, returnLength: 46
  876. KProcessHacker: ObQueryNameString: status 0x0
  877. KProcessHacker: KphQueryNameObject:
  878. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000348, ObjectInformationLength: 512, returnLength: 16
  879. KProcessHacker: ObQueryNameString: status 0x0
  880. KProcessHacker: KphQueryNameObject:
  881. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000034c, ObjectInformationLength: 512, returnLength: 16
  882. KProcessHacker: ObQueryNameString: status 0x0
  883. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SYSTEM
  884. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000350, ObjectInformationLength: 512, returnLength: 126
  885. KProcessHacker: ObQueryNameString: status 0x0
  886. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl
  887. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000354, ObjectInformationLength: 512, returnLength: 196
  888. KProcessHacker: ObQueryNameString: status 0x0
  889. KProcessHacker: KphQueryNameObject: \Device\KsecDD
  890. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000358, ObjectInformationLength: 512, returnLength: 46
  891. KProcessHacker: ObQueryNameString: status 0x0
  892. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SOFTWARE.LOG1
  893. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000035c, ObjectInformationLength: 512, returnLength: 140
  894. KProcessHacker: ObQueryNameString: status 0x0
  895. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SOFTWARE.LOG2
  896. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000360, ObjectInformationLength: 512, returnLength: 140
  897. KProcessHacker: ObQueryNameString: status 0x0
  898. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SYSTEM.LOG1
  899. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000364, ObjectInformationLength: 512, returnLength: 136
  900. KProcessHacker: ObQueryNameString: status 0x0
  901. KProcessHacker: KphQueryNameObject:
  902. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000368, ObjectInformationLength: 512, returnLength: 16
  903. KProcessHacker: ObQueryNameString: status 0x0
  904. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl
  905. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000036c, ObjectInformationLength: 512, returnLength: 170
  906. KProcessHacker: ObQueryNameString: status 0x0
  907. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SYSTEM.LOG2
  908. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000370, ObjectInformationLength: 512, returnLength: 136
  909. KProcessHacker: ObQueryNameString: status 0x0
  910. KProcessHacker: KphQueryNameObject:
  911. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000374, ObjectInformationLength: 512, returnLength: 16
  912. KProcessHacker: ObQueryNameString: status 0x0
  913. KProcessHacker: KphQueryNameObject:
  914. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000378, ObjectInformationLength: 512, returnLength: 16
  915. KProcessHacker: ObQueryNameString: status 0x0
  916. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e97d-e325-11ce-bfc1-08002be10318}\0128\Settings
  917. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000037c, ObjectInformationLength: 512, returnLength: 228
  918. KProcessHacker: ObQueryNameString: status 0x0
  919. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_0770&SUBSYS_077015AD&REV_00#4&bbf9765&0&1088#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}
  920. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000380, ObjectInformationLength: 512, returnLength: 238
  921. KProcessHacker: ObQueryNameString: status 0x0
  922. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{4747b320-62ce-11cf-a5d6-28db04c10000}
  923. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000384, ObjectInformationLength: 512, returnLength: 148
  924. KProcessHacker: ObQueryNameString: status 0x0
  925. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e97d-e325-11ce-bfc1-08002be10318}\0128
  926. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000388, ObjectInformationLength: 512, returnLength: 210
  927. KProcessHacker: ObQueryNameString: status 0x0
  928. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196}
  929. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000038c, ObjectInformationLength: 512, returnLength: 148
  930. KProcessHacker: ObQueryNameString: status 0x0
  931. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{0a4252a0-7e70-11d0-a5d6-28db04c10000}
  932. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000390, ObjectInformationLength: 512, returnLength: 148
  933. KProcessHacker: ObQueryNameString: status 0x0
  934. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{53172480-4791-11d0-a5d6-28db04c10000}
  935. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000394, ObjectInformationLength: 512, returnLength: 148
  936. KProcessHacker: ObQueryNameString: status 0x0
  937. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{cf1dda2c-9743-11d0-a3ee-00a0c9223196}
  938. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000398, ObjectInformationLength: 512, returnLength: 148
  939. KProcessHacker: ObQueryNameString: status 0x0
  940. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#UMBUS#0000#{65a9a6cf-64cd-480b-843e-32c86e1ba19f}
  941. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000039c, ObjectInformationLength: 512, returnLength: 146
  942. KProcessHacker: ObQueryNameString: status 0x0
  943. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{97ebaacb-95bd-11d0-a3ea-00a0c9223196}
  944. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003a0, ObjectInformationLength: 512, returnLength: 148
  945. KProcessHacker: ObQueryNameString: status 0x0
  946. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}
  947. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003a4, ObjectInformationLength: 512, returnLength: 148
  948. KProcessHacker: ObQueryNameString: status 0x0
  949. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#VMW0001#7#{3ff2c92b-6598-4e60-8e1c-0ccf4927e319}
  950. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003a8, ObjectInformationLength: 512, returnLength: 144
  951. KProcessHacker: ObQueryNameString: status 0x0
  952. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#PNP0303#4&1bd7f811&0#{884b96c3-56ef-11d1-bc8c-00a0c91405dd}
  953. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003ac, ObjectInformationLength: 512, returnLength: 166
  954. KProcessHacker: ObQueryNameString: status 0x0
  955. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#VMW0003#4&1bd7f811&0#{378de44c-56ef-11d1-bc8c-00a0c91405dd}
  956. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003b0, ObjectInformationLength: 512, returnLength: 166
  957. KProcessHacker: ObQueryNameString: status 0x0
  958. KProcessHacker: KphQueryNameObject: \GLOBAL??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&2edf08dd&0&010000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
  959. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003b4, ObjectInformationLength: 512, returnLength: 246
  960. KProcessHacker: ObQueryNameString: status 0x0
  961. KProcessHacker: KphQueryNameObject: \GLOBAL??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&2edf08dd&0&010000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
  962. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003b8, ObjectInformationLength: 512, returnLength: 246
  963. KProcessHacker: ObQueryNameString: status 0x0
  964. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_94_-_Intel(R)_Core(TM)_i7-6700K_CPU_@_4.00GHz#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0}
  965. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003bc, ObjectInformationLength: 512, returnLength: 298
  966. KProcessHacker: ObQueryNameString: status 0x0
  967. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_94_-_Intel(R)_Core(TM)_i7-6700K_CPU_@_4.00GHz#_0#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f}
  968. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003c0, ObjectInformationLength: 512, returnLength: 298
  969. KProcessHacker: ObQueryNameString: status 0x0
  970. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_94_-_Intel(R)_Core(TM)_i7-6700K_CPU_@_4.00GHz#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0}
  971. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003c4, ObjectInformationLength: 512, returnLength: 298
  972. KProcessHacker: ObQueryNameString: status 0x0
  973. KProcessHacker: KphQueryNameObject: \GLOBAL??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_94_-_Intel(R)_Core(TM)_i7-6700K_CPU_@_4.00GHz#_1#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f}
  974. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003c8, ObjectInformationLength: 512, returnLength: 298
  975. KProcessHacker: ObQueryNameString: status 0x0
  976. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl
  977. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003cc, ObjectInformationLength: 512, returnLength: 176
  978. KProcessHacker: ObQueryNameString: status 0x0
  979. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_0779&SUBSYS_077915AD&REV_00#4&3b50545d&0&00B8#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}
  980. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003d0, ObjectInformationLength: 512, returnLength: 240
  981. KProcessHacker: ObQueryNameString: status 0xc000017c
  982. KProcessHacker: KphQueryNameObject: status 0xc000017c
  983. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003d4, ObjectInformationLength: 512, returnLength: 16
  984. KProcessHacker: ObQueryNameString: status 0x0
  985. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\drivers\en-US\USBXHCI.SYS.mui
  986. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003d8, ObjectInformationLength: 512, returnLength: 158
  987. KProcessHacker: ObQueryNameString: status 0x0
  988. KProcessHacker: KphQueryNameObject: \KernelObjects\Session0
  989. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003dc, ObjectInformationLength: 512, returnLength: 64
  990. KProcessHacker: ObQueryNameString: status 0x0
  991. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\WDI\LogFiles\WdiContextLog.etl.003
  992. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003e0, ObjectInformationLength: 512, returnLength: 168
  993. KProcessHacker: ObQueryNameString: status 0x0
  994. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl
  995. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003e4, ObjectInformationLength: 512, returnLength: 192
  996. KProcessHacker: ObQueryNameString: status 0xc000017c
  997. KProcessHacker: KphQueryNameObject: status 0xc000017c
  998. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003e8, ObjectInformationLength: 512, returnLength: 16
  999. KProcessHacker: ObQueryNameString: status 0xc000017c
  1000. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1001. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003ec, ObjectInformationLength: 512, returnLength: 16
  1002. KProcessHacker: ObQueryNameString: status 0xc000017c
  1003. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1004. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003f0, ObjectInformationLength: 512, returnLength: 16
  1005. KProcessHacker: ObQueryNameString: status 0xc000017c
  1006. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1007. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003f4, ObjectInformationLength: 512, returnLength: 16
  1008. KProcessHacker: ObQueryNameString: status 0x0
  1009. KProcessHacker: KphQueryNameObject: \GLOBAL??\USB#ROOT_HUB#5&2891968b&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}
  1010. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003f8, ObjectInformationLength: 512, returnLength: 166
  1011. KProcessHacker: ObQueryNameString: status 0x0
  1012. KProcessHacker: KphQueryNameObject: \GLOBAL??\USB#ROOT_HUB20#5&36a4b5d6&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}
  1013. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800003fc, ObjectInformationLength: 512, returnLength: 170
  1014. KProcessHacker: ObQueryNameString: status 0xc000017c
  1015. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1016. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000404, ObjectInformationLength: 512, returnLength: 16
  1017. KProcessHacker: ObQueryNameString: status 0xc000017c
  1018. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1019. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000408, ObjectInformationLength: 512, returnLength: 16
  1020. KProcessHacker: ObQueryNameString: status 0xc000017c
  1021. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1022. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000040c, ObjectInformationLength: 512, returnLength: 16
  1023. KProcessHacker: ObQueryNameString: status 0xc000017c
  1024. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1025. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000410, ObjectInformationLength: 512, returnLength: 16
  1026. KProcessHacker: ObQueryNameString: status 0xc000017c
  1027. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1028. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000414, ObjectInformationLength: 512, returnLength: 16
  1029. KProcessHacker: ObQueryNameString: status 0xc000017c
  1030. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1031. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000418, ObjectInformationLength: 512, returnLength: 16
  1032. KProcessHacker: ObQueryNameString: status 0xc000017c
  1033. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1034. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000041c, ObjectInformationLength: 512, returnLength: 16
  1035. KProcessHacker: ObQueryNameString: status 0xc000017c
  1036. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1037. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000420, ObjectInformationLength: 512, returnLength: 16
  1038. KProcessHacker: ObQueryNameString: status 0xc000017c
  1039. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1040. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000424, ObjectInformationLength: 512, returnLength: 16
  1041. KProcessHacker: ObQueryNameString: status 0xc000017c
  1042. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1043. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000428, ObjectInformationLength: 512, returnLength: 16
  1044. KProcessHacker: ObQueryNameString: status 0xc000017c
  1045. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1046. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000042c, ObjectInformationLength: 512, returnLength: 16
  1047. KProcessHacker: ObQueryNameString: status 0xc000017c
  1048. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1049. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000430, ObjectInformationLength: 512, returnLength: 16
  1050. KProcessHacker: ObQueryNameString: status 0xc000017c
  1051. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1052. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000434, ObjectInformationLength: 512, returnLength: 16
  1053. KProcessHacker: ObQueryNameString: status 0xc000017c
  1054. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1055. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000438, ObjectInformationLength: 512, returnLength: 16
  1056. KProcessHacker: ObQueryNameString: status 0xc000017c
  1057. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1058. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000043c, ObjectInformationLength: 512, returnLength: 16
  1059. KProcessHacker: ObQueryNameString: status 0xc000017c
  1060. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1061. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000440, ObjectInformationLength: 512, returnLength: 16
  1062. KProcessHacker: ObQueryNameString: status 0xc000017c
  1063. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1064. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000444, ObjectInformationLength: 512, returnLength: 16
  1065. KProcessHacker: ObQueryNameString: status 0xc000017c
  1066. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1067. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000448, ObjectInformationLength: 512, returnLength: 16
  1068. KProcessHacker: ObQueryNameString: status 0xc000017c
  1069. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1070. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000044c, ObjectInformationLength: 512, returnLength: 16
  1071. KProcessHacker: ObQueryNameString: status 0xc000017c
  1072. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1073. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000450, ObjectInformationLength: 512, returnLength: 16
  1074. KProcessHacker: ObQueryNameString: status 0xc000017c
  1075. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1076. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000454, ObjectInformationLength: 512, returnLength: 16
  1077. KProcessHacker: ObQueryNameString: status 0xc000017c
  1078. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1079. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000458, ObjectInformationLength: 512, returnLength: 16
  1080. KProcessHacker: ObQueryNameString: status 0xc000017c
  1081. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1082. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000045c, ObjectInformationLength: 512, returnLength: 16
  1083. KProcessHacker: ObQueryNameString: status 0xc000017c
  1084. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1085. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000460, ObjectInformationLength: 512, returnLength: 16
  1086. KProcessHacker: ObQueryNameString: status 0xc000017c
  1087. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1088. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000464, ObjectInformationLength: 512, returnLength: 16
  1089. KProcessHacker: ObQueryNameString: status 0xc000017c
  1090. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1091. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000468, ObjectInformationLength: 512, returnLength: 16
  1092. KProcessHacker: ObQueryNameString: status 0xc000017c
  1093. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1094. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000046c, ObjectInformationLength: 512, returnLength: 16
  1095. KProcessHacker: ObQueryNameString: status 0xc000017c
  1096. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1097. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000470, ObjectInformationLength: 512, returnLength: 16
  1098. KProcessHacker: ObQueryNameString: status 0xc000017c
  1099. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1100. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000474, ObjectInformationLength: 512, returnLength: 16
  1101. KProcessHacker: ObQueryNameString: status 0xc000017c
  1102. KProcessHacker: KphQueryNameObject: status 0xc000017c
  1103. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000478, ObjectInformationLength: 512, returnLength: 16
  1104. KProcessHacker: ObQueryNameString: status 0x0
  1105. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows
  1106. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000047c, ObjectInformationLength: 512, returnLength: 124
  1107. KProcessHacker: ObQueryNameString: status 0x0
  1108. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{a17579f0-4fec-4936-9364-249460863be5}
  1109. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000480, ObjectInformationLength: 512, returnLength: 268
  1110. KProcessHacker: ObQueryNameString: status 0x0
  1111. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{86841137-ed8e-4d97-9975-f2ed56b4430e}
  1112. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000484, ObjectInformationLength: 512, returnLength: 268
  1113. KProcessHacker: ObQueryNameString: status 0x0
  1114. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
  1115. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000488, ObjectInformationLength: 512, returnLength: 268
  1116. KProcessHacker: ObQueryNameString: status 0x0
  1117. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}
  1118. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000048c, ObjectInformationLength: 512, returnLength: 268
  1119. KProcessHacker: ObQueryNameString: status 0x0
  1120. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
  1121. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000490, ObjectInformationLength: 512, returnLength: 268
  1122. KProcessHacker: ObQueryNameString: status 0x0
  1123. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}
  1124. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000494, ObjectInformationLength: 512, returnLength: 268
  1125. KProcessHacker: ObQueryNameString: status 0x0
  1126. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
  1127. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000498, ObjectInformationLength: 512, returnLength: 268
  1128. KProcessHacker: ObQueryNameString: status 0x0
  1129. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}
  1130. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000049c, ObjectInformationLength: 512, returnLength: 268
  1131. KProcessHacker: ObQueryNameString: status 0x0
  1132. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
  1133. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004a0, ObjectInformationLength: 512, returnLength: 268
  1134. KProcessHacker: ObQueryNameString: status 0x0
  1135. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
  1136. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004a4, ObjectInformationLength: 512, returnLength: 268
  1137. KProcessHacker: ObQueryNameString: status 0x0
  1138. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}
  1139. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004a8, ObjectInformationLength: 512, returnLength: 268
  1140. KProcessHacker: ObQueryNameString: status 0x0
  1141. KProcessHacker: KphQueryNameObject: \GLOBAL??\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
  1142. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004ac, ObjectInformationLength: 512, returnLength: 268
  1143. KProcessHacker: ObQueryNameString: status 0x0
  1144. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFF82532300#{cac88484-7515-4c03-82e6-71a87abac361}
  1145. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004b0, ObjectInformationLength: 512, returnLength: 242
  1146. KProcessHacker: ObQueryNameString: status 0x0
  1147. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFF82532300#{ad498944-762f-11d0-8dcb-00c04fc3358c}
  1148. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004b4, ObjectInformationLength: 512, returnLength: 242
  1149. KProcessHacker: ObQueryNameString: status 0x0
  1150. KProcessHacker: KphQueryNameObject:
  1151. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004b8, ObjectInformationLength: 512, returnLength: 16
  1152. KProcessHacker: ObQueryNameString: status 0x0
  1153. KProcessHacker: KphQueryNameObject: \GLOBAL??\USB#ROOT_HUB30#5&20be2fcd&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}
  1154. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004bc, ObjectInformationLength: 512, returnLength: 174
  1155. KProcessHacker: ObQueryNameString: status 0x0
  1156. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\swapfile.sys
  1157. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004c0, ObjectInformationLength: 512, returnLength: 90
  1158. KProcessHacker: ObQueryNameString: status 0x0
  1159. KProcessHacker: KphQueryNameObject: \EFSInitEvent
  1160. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004c4, ObjectInformationLength: 512, returnLength: 44
  1161. KProcessHacker: ObQueryNameString: status 0x0
  1162. KProcessHacker: KphQueryNameObject:
  1163. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004c8, ObjectInformationLength: 512, returnLength: 16
  1164. KProcessHacker: ObQueryNameString: status 0x0
  1165. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\pagefile.sys
  1166. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004cc, ObjectInformationLength: 512, returnLength: 90
  1167. KProcessHacker: ObQueryNameString: status 0x0
  1168. KProcessHacker: KphQueryNameObject: \Device\Tcp
  1169. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004d0, ObjectInformationLength: 512, returnLength: 40
  1170. KProcessHacker: ObQueryNameString: status 0x0
  1171. KProcessHacker: KphQueryNameObject:
  1172. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004d4, ObjectInformationLength: 512, returnLength: 16
  1173. KProcessHacker: ObQueryNameString: status 0x0
  1174. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\DEFAULT
  1175. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004d8, ObjectInformationLength: 512, returnLength: 128
  1176. KProcessHacker: ObQueryNameString: status 0x0
  1177. KProcessHacker: KphQueryNameObject:
  1178. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004dc, ObjectInformationLength: 512, returnLength: 16
  1179. KProcessHacker: ObQueryNameString: status 0x0
  1180. KProcessHacker: KphQueryNameObject: \Win32kCrossSessionGlobals
  1181. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004e0, ObjectInformationLength: 512, returnLength: 70
  1182. KProcessHacker: ObQueryNameString: status 0x0
  1183. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\en-US\win32kbase.sys.mui
  1184. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004e4, ObjectInformationLength: 512, returnLength: 148
  1185. KProcessHacker: ObQueryNameString: status 0x0
  1186. KProcessHacker: KphQueryNameObject:
  1187. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004e8, ObjectInformationLength: 512, returnLength: 16
  1188. KProcessHacker: ObQueryNameString: status 0x0
  1189. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications
  1190. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004ec, ObjectInformationLength: 512, returnLength: 170
  1191. KProcessHacker: ObQueryNameString: status 0x0
  1192. KProcessHacker: KphQueryNameObject:
  1193. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004f0, ObjectInformationLength: 512, returnLength: 16
  1194. KProcessHacker: ObQueryNameString: status 0x0
  1195. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\DEFAULT.LOG1
  1196. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004f4, ObjectInformationLength: 512, returnLength: 138
  1197. KProcessHacker: ObQueryNameString: status 0x0
  1198. KProcessHacker: KphQueryNameObject:
  1199. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004f8, ObjectInformationLength: 512, returnLength: 16
  1200. KProcessHacker: ObQueryNameString: status 0x0
  1201. KProcessHacker: KphQueryNameObject:
  1202. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800004fc, ObjectInformationLength: 512, returnLength: 16
  1203. KProcessHacker: ObQueryNameString: status 0x0
  1204. KProcessHacker: KphQueryNameObject: \Device\PhysicalMemory
  1205. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000500, ObjectInformationLength: 512, returnLength: 62
  1206. KProcessHacker: ObQueryNameString: status 0x0
  1207. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data
  1208. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000504, ObjectInformationLength: 512, returnLength: 180
  1209. KProcessHacker: ObQueryNameString: status 0x0
  1210. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\DEFAULT.LOG2
  1211. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000508, ObjectInformationLength: 512, returnLength: 138
  1212. KProcessHacker: ObQueryNameString: status 0x0
  1213. KProcessHacker: KphQueryNameObject:
  1214. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000050c, ObjectInformationLength: 512, returnLength: 16
  1215. KProcessHacker: ObQueryNameString: status 0x0
  1216. KProcessHacker: KphQueryNameObject:
  1217. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000510, ObjectInformationLength: 512, returnLength: 16
  1218. KProcessHacker: ObQueryNameString: status 0x0
  1219. KProcessHacker: KphQueryNameObject:
  1220. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000514, ObjectInformationLength: 512, returnLength: 16
  1221. KProcessHacker: ObQueryNameString: status 0x0
  1222. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00#3&61aaa01&0&78#{5b45201d-f2f2-4f3b-85bb-30ff1f953599}
  1223. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000518, ObjectInformationLength: 512, returnLength: 234
  1224. KProcessHacker: ObQueryNameString: status 0x0
  1225. KProcessHacker: KphQueryNameObject: \GLOBAL??\PCI#VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00#3&61aaa01&0&78#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}
  1226. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000051c, ObjectInformationLength: 512, returnLength: 234
  1227. KProcessHacker: ObQueryNameString: status 0x0
  1228. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e97d-e325-11ce-bfc1-08002be10318}\0131
  1229. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000520, ObjectInformationLength: 512, returnLength: 210
  1230. KProcessHacker: ObQueryNameString: status 0x0
  1231. KProcessHacker: KphQueryNameObject:
  1232. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000524, ObjectInformationLength: 512, returnLength: 16
  1233. KProcessHacker: ObQueryNameString: status 0x0
  1234. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96e-e325-11ce-bfc1-08002be10318}\0001
  1235. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000528, ObjectInformationLength: 512, returnLength: 210
  1236. KProcessHacker: ObQueryNameString: status 0x0
  1237. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\SleepStudy\UserNotPresentSession.etl
  1238. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000052c, ObjectInformationLength: 512, returnLength: 172
  1239. KProcessHacker: ObQueryNameString: status 0x0
  1240. KProcessHacker: KphQueryNameObject: \GLOBAL??\DISPLAY#Default_Monitor#4&427137e&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}
  1241. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000530, ObjectInformationLength: 512, returnLength: 196
  1242. KProcessHacker: ObQueryNameString: status 0x0
  1243. KProcessHacker: KphQueryNameObject: \GLOBAL??\DISPLAY#Default_Monitor#4&427137e&0&UID0#{866519b5-3f07-4c97-b7df-24c5d8a8ccb8}
  1244. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000534, ObjectInformationLength: 512, returnLength: 196
  1245. KProcessHacker: ObQueryNameString: status 0x0
  1246. KProcessHacker: KphQueryNameObject:
  1247. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000538, ObjectInformationLength: 512, returnLength: 16
  1248. KProcessHacker: ObQueryNameString: status 0x0
  1249. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#BasicDisplay#0000#{5b45201d-f2f2-4f3b-85bb-30ff1f953599}
  1250. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000053c, ObjectInformationLength: 512, returnLength: 160
  1251. KProcessHacker: ObQueryNameString: status 0x0
  1252. KProcessHacker: KphQueryNameObject:
  1253. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000540, ObjectInformationLength: 512, returnLength: 16
  1254. KProcessHacker: ObQueryNameString: status 0x0
  1255. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000002.regtrans-ms
  1256. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000544, ObjectInformationLength: 512, returnLength: 328
  1257. KProcessHacker: ObQueryNameString: status 0x0
  1258. KProcessHacker: KphQueryNameObject: \Device\PhysicalMemory
  1259. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000548, ObjectInformationLength: 512, returnLength: 62
  1260. KProcessHacker: ObQueryNameString: status 0x0
  1261. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000001.regtrans-ms
  1262. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000054c, ObjectInformationLength: 512, returnLength: 328
  1263. KProcessHacker: ObQueryNameString: status 0x0
  1264. KProcessHacker: KphQueryNameObject:
  1265. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000550, ObjectInformationLength: 512, returnLength: 16
  1266. KProcessHacker: ObQueryNameString: status 0x0
  1267. KProcessHacker: KphQueryNameObject: \GLOBAL??\ROOT#BasicRender#0000#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}
  1268. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000554, ObjectInformationLength: 512, returnLength: 158
  1269. KProcessHacker: ObQueryNameString: status 0x0
  1270. KProcessHacker: KphQueryNameObject:
  1271. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000558, ObjectInformationLength: 512, returnLength: 16
  1272. KProcessHacker: ObQueryNameString: status 0x0
  1273. KProcessHacker: KphQueryNameObject:
  1274. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000055c, ObjectInformationLength: 512, returnLength: 16
  1275. KProcessHacker: ObQueryNameString: status 0x0
  1276. KProcessHacker: KphQueryNameObject: \Windows\WindowStations
  1277. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000560, ObjectInformationLength: 512, returnLength: 64
  1278. KProcessHacker: ObQueryNameString: status 0x0
  1279. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\umstartup.etl
  1280. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000564, ObjectInformationLength: 512, returnLength: 126
  1281. KProcessHacker: ObQueryNameString: status 0x0
  1282. KProcessHacker: KphQueryNameObject: \GLOBAL??\HID#VID_0E0F&PID_0003&MI_00#8&1230c469&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}
  1283. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000568, ObjectInformationLength: 512, returnLength: 206
  1284. KProcessHacker: ObQueryNameString: status 0x0
  1285. KProcessHacker: KphQueryNameObject: \GLOBAL??\HID#VID_0E0F&PID_0003&MI_01#8&3608022b&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}
  1286. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000056c, ObjectInformationLength: 512, returnLength: 206
  1287. KProcessHacker: ObQueryNameString: status 0x0
  1288. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\USB\VID_0E0F&PID_0003\6&30c8ca5f&0&5\Device Parameters
  1289. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000570, ObjectInformationLength: 512, returnLength: 214
  1290. KProcessHacker: ObQueryNameString: status 0x0
  1291. KProcessHacker: KphQueryNameObject:
  1292. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000574, ObjectInformationLength: 512, returnLength: 16
  1293. KProcessHacker: ObQueryNameString: status 0x0
  1294. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1295. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000578, ObjectInformationLength: 512, returnLength: 64
  1296. KProcessHacker: ObQueryNameString: status 0x0
  1297. KProcessHacker: KphQueryNameObject:
  1298. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000057c, ObjectInformationLength: 512, returnLength: 16
  1299. KProcessHacker: ObQueryNameString: status 0x0
  1300. KProcessHacker: KphQueryNameObject:
  1301. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000580, ObjectInformationLength: 512, returnLength: 16
  1302. KProcessHacker: ObQueryNameString: status 0x0
  1303. KProcessHacker: KphQueryNameObject:
  1304. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000584, ObjectInformationLength: 512, returnLength: 16
  1305. KProcessHacker: ObQueryNameString: status 0x0
  1306. KProcessHacker: KphQueryNameObject:
  1307. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000588, ObjectInformationLength: 512, returnLength: 16
  1308. KProcessHacker: ObQueryNameString: status 0x0
  1309. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\USB\VID_0E0F&PID_0003\6&30c8ca5f&0&5\Device Parameters
  1310. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000058c, ObjectInformationLength: 512, returnLength: 214
  1311. KProcessHacker: ObQueryNameString: status 0x0
  1312. KProcessHacker: KphQueryNameObject: \GLOBAL??\USB#VID_0E0F&PID_0003#6&30c8ca5f&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
  1313. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000590, ObjectInformationLength: 512, returnLength: 188
  1314. KProcessHacker: ObQueryNameString: status 0x0
  1315. KProcessHacker: KphQueryNameObject:
  1316. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000594, ObjectInformationLength: 512, returnLength: 16
  1317. KProcessHacker: ObQueryNameString: status 0x0
  1318. KProcessHacker: KphQueryNameObject: \GLOBAL??\HID#VID_0E0F&PID_0003&MI_01#8&3608022b&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}
  1319. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000598, ObjectInformationLength: 512, returnLength: 206
  1320. KProcessHacker: ObQueryNameString: status 0x0
  1321. KProcessHacker: KphQueryNameObject:
  1322. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000059c, ObjectInformationLength: 512, returnLength: 16
  1323. KProcessHacker: ObQueryNameString: status 0x0
  1324. KProcessHacker: KphQueryNameObject:
  1325. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005a0, ObjectInformationLength: 512, returnLength: 16
  1326. KProcessHacker: ObQueryNameString: status 0x0
  1327. KProcessHacker: KphQueryNameObject:
  1328. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005a4, ObjectInformationLength: 512, returnLength: 16
  1329. KProcessHacker: ObQueryNameString: status 0x0
  1330. KProcessHacker: KphQueryNameObject:
  1331. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005a8, ObjectInformationLength: 512, returnLength: 16
  1332. KProcessHacker: ObQueryNameString: status 0x0
  1333. KProcessHacker: KphQueryNameObject:
  1334. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005ac, ObjectInformationLength: 512, returnLength: 16
  1335. KProcessHacker: ObQueryNameString: status 0x0
  1336. KProcessHacker: KphQueryNameObject:
  1337. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005b0, ObjectInformationLength: 512, returnLength: 16
  1338. KProcessHacker: ObQueryNameString: status 0x0
  1339. KProcessHacker: KphQueryNameObject:
  1340. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005b4, ObjectInformationLength: 512, returnLength: 16
  1341. KProcessHacker: ObQueryNameString: status 0x0
  1342. KProcessHacker: KphQueryNameObject: \GLOBAL??\HID#VID_0E0F&PID_0003&MI_00#8&1230c469&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}
  1343. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005b8, ObjectInformationLength: 512, returnLength: 206
  1344. KProcessHacker: ObQueryNameString: status 0x0
  1345. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock
  1346. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005bc, ObjectInformationLength: 512, returnLength: 166
  1347. KProcessHacker: ObQueryNameString: status 0x0
  1348. KProcessHacker: KphQueryNameObject:
  1349. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005c0, ObjectInformationLength: 512, returnLength: 16
  1350. KProcessHacker: ObQueryNameString: status 0x0
  1351. KProcessHacker: KphQueryNameObject:
  1352. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005c4, ObjectInformationLength: 512, returnLength: 16
  1353. KProcessHacker: ObQueryNameString: status 0x0
  1354. KProcessHacker: KphQueryNameObject:
  1355. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005c8, ObjectInformationLength: 512, returnLength: 16
  1356. KProcessHacker: ObQueryNameString: status 0x0
  1357. KProcessHacker: KphQueryNameObject:
  1358. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005cc, ObjectInformationLength: 512, returnLength: 16
  1359. KProcessHacker: ObQueryNameString: status 0x0
  1360. KProcessHacker: KphQueryNameObject:
  1361. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005d0, ObjectInformationLength: 512, returnLength: 16
  1362. KProcessHacker: ObQueryNameString: status 0x0
  1363. KProcessHacker: KphQueryNameObject:
  1364. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005d4, ObjectInformationLength: 512, returnLength: 16
  1365. KProcessHacker: ObQueryNameString: status 0x0
  1366. KProcessHacker: KphQueryNameObject:
  1367. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005d8, ObjectInformationLength: 512, returnLength: 16
  1368. KProcessHacker: ObQueryNameString: status 0x0
  1369. KProcessHacker: KphQueryNameObject:
  1370. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005dc, ObjectInformationLength: 512, returnLength: 16
  1371. KProcessHacker: ObQueryNameString: status 0x0
  1372. KProcessHacker: KphQueryNameObject:
  1373. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005e0, ObjectInformationLength: 512, returnLength: 16
  1374. KProcessHacker: ObQueryNameString: status 0x0
  1375. KProcessHacker: KphQueryNameObject:
  1376. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005e4, ObjectInformationLength: 512, returnLength: 16
  1377. KProcessHacker: ObQueryNameString: status 0x0
  1378. KProcessHacker: KphQueryNameObject:
  1379. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005e8, ObjectInformationLength: 512, returnLength: 16
  1380. KProcessHacker: ObQueryNameString: status 0x0
  1381. KProcessHacker: KphQueryNameObject:
  1382. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005ec, ObjectInformationLength: 512, returnLength: 16
  1383. KProcessHacker: ObQueryNameString: status 0x0
  1384. KProcessHacker: KphQueryNameObject:
  1385. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005f0, ObjectInformationLength: 512, returnLength: 16
  1386. KProcessHacker: ObQueryNameString: status 0x0
  1387. KProcessHacker: KphQueryNameObject:
  1388. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005f4, ObjectInformationLength: 512, returnLength: 16
  1389. KProcessHacker: ObQueryNameString: status 0x0
  1390. KProcessHacker: KphQueryNameObject:
  1391. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005f8, ObjectInformationLength: 512, returnLength: 16
  1392. KProcessHacker: ObQueryNameString: status 0x0
  1393. KProcessHacker: KphQueryNameObject:
  1394. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800005fc, ObjectInformationLength: 512, returnLength: 16
  1395. KProcessHacker: ObQueryNameString: status 0x0
  1396. KProcessHacker: KphQueryNameObject:
  1397. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000600, ObjectInformationLength: 512, returnLength: 16
  1398. KProcessHacker: ObQueryNameString: status 0x0
  1399. KProcessHacker: KphQueryNameObject:
  1400. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000604, ObjectInformationLength: 512, returnLength: 16
  1401. KProcessHacker: ObQueryNameString: status 0x0
  1402. KProcessHacker: KphQueryNameObject:
  1403. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000608, ObjectInformationLength: 512, returnLength: 16
  1404. KProcessHacker: ObQueryNameString: status 0x0
  1405. KProcessHacker: KphQueryNameObject:
  1406. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000060c, ObjectInformationLength: 512, returnLength: 16
  1407. KProcessHacker: ObQueryNameString: status 0x0
  1408. KProcessHacker: KphQueryNameObject:
  1409. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000610, ObjectInformationLength: 512, returnLength: 16
  1410. KProcessHacker: ObQueryNameString: status 0x0
  1411. KProcessHacker: KphQueryNameObject:
  1412. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000614, ObjectInformationLength: 512, returnLength: 16
  1413. KProcessHacker: ObQueryNameString: status 0x0
  1414. KProcessHacker: KphQueryNameObject:
  1415. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000618, ObjectInformationLength: 512, returnLength: 16
  1416. KProcessHacker: ObQueryNameString: status 0x0
  1417. KProcessHacker: KphQueryNameObject:
  1418. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000061c, ObjectInformationLength: 512, returnLength: 16
  1419. KProcessHacker: ObQueryNameString: status 0x0
  1420. KProcessHacker: KphQueryNameObject:
  1421. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000620, ObjectInformationLength: 512, returnLength: 16
  1422. KProcessHacker: ObQueryNameString: status 0x0
  1423. KProcessHacker: KphQueryNameObject:
  1424. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000624, ObjectInformationLength: 512, returnLength: 16
  1425. KProcessHacker: ObQueryNameString: status 0x0
  1426. KProcessHacker: KphQueryNameObject:
  1427. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000628, ObjectInformationLength: 512, returnLength: 16
  1428. KProcessHacker: ObQueryNameString: status 0x0
  1429. KProcessHacker: KphQueryNameObject:
  1430. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000062c, ObjectInformationLength: 512, returnLength: 16
  1431. KProcessHacker: ObQueryNameString: status 0x0
  1432. KProcessHacker: KphQueryNameObject:
  1433. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000630, ObjectInformationLength: 512, returnLength: 16
  1434. KProcessHacker: ObQueryNameString: status 0x0
  1435. KProcessHacker: KphQueryNameObject:
  1436. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000634, ObjectInformationLength: 512, returnLength: 16
  1437. KProcessHacker: ObQueryNameString: status 0x0
  1438. KProcessHacker: KphQueryNameObject:
  1439. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000638, ObjectInformationLength: 512, returnLength: 16
  1440. KProcessHacker: ObQueryNameString: status 0x0
  1441. KProcessHacker: KphQueryNameObject:
  1442. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000063c, ObjectInformationLength: 512, returnLength: 16
  1443. KProcessHacker: ObQueryNameString: status 0x0
  1444. KProcessHacker: KphQueryNameObject:
  1445. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000640, ObjectInformationLength: 512, returnLength: 16
  1446. KProcessHacker: ObQueryNameString: status 0x0
  1447. KProcessHacker: KphQueryNameObject:
  1448. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000644, ObjectInformationLength: 512, returnLength: 16
  1449. KProcessHacker: ObQueryNameString: status 0x0
  1450. KProcessHacker: KphQueryNameObject:
  1451. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000648, ObjectInformationLength: 512, returnLength: 16
  1452. KProcessHacker: ObQueryNameString: status 0x0
  1453. KProcessHacker: KphQueryNameObject:
  1454. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000064c, ObjectInformationLength: 512, returnLength: 16
  1455. KProcessHacker: ObQueryNameString: status 0x0
  1456. KProcessHacker: KphQueryNameObject:
  1457. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000650, ObjectInformationLength: 512, returnLength: 16
  1458. KProcessHacker: ObQueryNameString: status 0x0
  1459. KProcessHacker: KphQueryNameObject:
  1460. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000654, ObjectInformationLength: 512, returnLength: 16
  1461. KProcessHacker: ObQueryNameString: status 0x0
  1462. KProcessHacker: KphQueryNameObject:
  1463. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000658, ObjectInformationLength: 512, returnLength: 16
  1464. KProcessHacker: ObQueryNameString: status 0x0
  1465. KProcessHacker: KphQueryNameObject:
  1466. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000065c, ObjectInformationLength: 512, returnLength: 16
  1467. KProcessHacker: ObQueryNameString: status 0x0
  1468. KProcessHacker: KphQueryNameObject:
  1469. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000660, ObjectInformationLength: 512, returnLength: 16
  1470. KProcessHacker: ObQueryNameString: status 0x0
  1471. KProcessHacker: KphQueryNameObject:
  1472. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000664, ObjectInformationLength: 512, returnLength: 16
  1473. KProcessHacker: ObQueryNameString: status 0x0
  1474. KProcessHacker: KphQueryNameObject:
  1475. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000668, ObjectInformationLength: 512, returnLength: 16
  1476. KProcessHacker: ObQueryNameString: status 0x0
  1477. KProcessHacker: KphQueryNameObject:
  1478. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000066c, ObjectInformationLength: 512, returnLength: 16
  1479. KProcessHacker: ObQueryNameString: status 0x0
  1480. KProcessHacker: KphQueryNameObject:
  1481. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000670, ObjectInformationLength: 512, returnLength: 16
  1482. KProcessHacker: ObQueryNameString: status 0x0
  1483. KProcessHacker: KphQueryNameObject:
  1484. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000674, ObjectInformationLength: 512, returnLength: 16
  1485. KProcessHacker: ObQueryNameString: status 0x0
  1486. KProcessHacker: KphQueryNameObject:
  1487. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000678, ObjectInformationLength: 512, returnLength: 16
  1488. KProcessHacker: ObQueryNameString: status 0x0
  1489. KProcessHacker: KphQueryNameObject:
  1490. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000067c, ObjectInformationLength: 512, returnLength: 16
  1491. KProcessHacker: ObQueryNameString: status 0x0
  1492. KProcessHacker: KphQueryNameObject:
  1493. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000680, ObjectInformationLength: 512, returnLength: 16
  1494. KProcessHacker: ObQueryNameString: status 0x0
  1495. KProcessHacker: KphQueryNameObject:
  1496. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000684, ObjectInformationLength: 512, returnLength: 16
  1497. KProcessHacker: ObQueryNameString: status 0x0
  1498. KProcessHacker: KphQueryNameObject:
  1499. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000688, ObjectInformationLength: 512, returnLength: 16
  1500. KProcessHacker: ObQueryNameString: status 0x0
  1501. KProcessHacker: KphQueryNameObject:
  1502. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000068c, ObjectInformationLength: 512, returnLength: 16
  1503. KProcessHacker: ObQueryNameString: status 0x0
  1504. KProcessHacker: KphQueryNameObject:
  1505. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000690, ObjectInformationLength: 512, returnLength: 16
  1506. KProcessHacker: ObQueryNameString: status 0x0
  1507. KProcessHacker: KphQueryNameObject:
  1508. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000694, ObjectInformationLength: 512, returnLength: 16
  1509. KProcessHacker: ObQueryNameString: status 0x0
  1510. KProcessHacker: KphQueryNameObject: \Disconnect
  1511. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000698, ObjectInformationLength: 512, returnLength: 40
  1512. KProcessHacker: ObQueryNameString: status 0x0
  1513. KProcessHacker: KphQueryNameObject: \Sessions\1\Windows\WindowStations
  1514. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000069c, ObjectInformationLength: 512, returnLength: 86
  1515. KProcessHacker: ObQueryNameString: status 0x0
  1516. KProcessHacker: KphQueryNameObject:
  1517. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006a0, ObjectInformationLength: 512, returnLength: 16
  1518. KProcessHacker: ObQueryNameString: status 0x0
  1519. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TM.blf
  1520. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006a4, ObjectInformationLength: 512, returnLength: 254
  1521. KProcessHacker: ObQueryNameString: status 0x0
  1522. KProcessHacker: KphQueryNameObject:
  1523. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006a8, ObjectInformationLength: 512, returnLength: 16
  1524. KProcessHacker: ObQueryNameString: status 0x0
  1525. KProcessHacker: KphQueryNameObject:
  1526. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006ac, ObjectInformationLength: 512, returnLength: 16
  1527. KProcessHacker: ObQueryNameString: status 0x0
  1528. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2
  1529. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006b0, ObjectInformationLength: 512, returnLength: 174
  1530. KProcessHacker: ObQueryNameString: status 0x0
  1531. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1
  1532. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006b4, ObjectInformationLength: 512, returnLength: 174
  1533. KProcessHacker: ObQueryNameString: status 0x0
  1534. KProcessHacker: KphQueryNameObject:
  1535. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006b8, ObjectInformationLength: 512, returnLength: 16
  1536. KProcessHacker: ObQueryNameString: status 0x0
  1537. KProcessHacker: KphQueryNameObject:
  1538. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006bc, ObjectInformationLength: 512, returnLength: 16
  1539. KProcessHacker: ObQueryNameString: status 0x0
  1540. KProcessHacker: KphQueryNameObject:
  1541. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006c0, ObjectInformationLength: 512, returnLength: 16
  1542. KProcessHacker: ObQueryNameString: status 0x0
  1543. KProcessHacker: KphQueryNameObject:
  1544. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006c4, ObjectInformationLength: 512, returnLength: 16
  1545. KProcessHacker: ObQueryNameString: status 0x0
  1546. KProcessHacker: KphQueryNameObject:
  1547. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006c8, ObjectInformationLength: 512, returnLength: 16
  1548. KProcessHacker: ObQueryNameString: status 0x0
  1549. KProcessHacker: KphQueryNameObject:
  1550. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006cc, ObjectInformationLength: 512, returnLength: 16
  1551. KProcessHacker: ObQueryNameString: status 0x0
  1552. KProcessHacker: KphQueryNameObject:
  1553. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006d0, ObjectInformationLength: 512, returnLength: 16
  1554. KProcessHacker: ObQueryNameString: status 0x0
  1555. KProcessHacker: KphQueryNameObject:
  1556. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006d4, ObjectInformationLength: 512, returnLength: 16
  1557. KProcessHacker: ObQueryNameString: status 0x0
  1558. KProcessHacker: KphQueryNameObject:
  1559. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006d8, ObjectInformationLength: 512, returnLength: 16
  1560. KProcessHacker: ObQueryNameString: status 0x0
  1561. KProcessHacker: KphQueryNameObject:
  1562. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006dc, ObjectInformationLength: 512, returnLength: 16
  1563. KProcessHacker: ObQueryNameString: status 0x0
  1564. KProcessHacker: KphQueryNameObject: \Sessions\1\BaseNamedObjects\EventShutDownCSRSS
  1565. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006e0, ObjectInformationLength: 512, returnLength: 112
  1566. KProcessHacker: ObQueryNameString: status 0x0
  1567. KProcessHacker: KphQueryNameObject:
  1568. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006e4, ObjectInformationLength: 512, returnLength: 16
  1569. KProcessHacker: ObQueryNameString: status 0x0
  1570. KProcessHacker: KphQueryNameObject:
  1571. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006e8, ObjectInformationLength: 512, returnLength: 16
  1572. KProcessHacker: ObQueryNameString: status 0x0
  1573. KProcessHacker: KphQueryNameObject:
  1574. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006ec, ObjectInformationLength: 512, returnLength: 16
  1575. KProcessHacker: ObQueryNameString: status 0x0
  1576. KProcessHacker: KphQueryNameObject:
  1577. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006f0, ObjectInformationLength: 512, returnLength: 16
  1578. KProcessHacker: ObQueryNameString: status 0x0
  1579. KProcessHacker: KphQueryNameObject:
  1580. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006f4, ObjectInformationLength: 512, returnLength: 16
  1581. KProcessHacker: ObQueryNameString: status 0x0
  1582. KProcessHacker: KphQueryNameObject:
  1583. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006f8, ObjectInformationLength: 512, returnLength: 16
  1584. KProcessHacker: ObQueryNameString: status 0x0
  1585. KProcessHacker: KphQueryNameObject:
  1586. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800006fc, ObjectInformationLength: 512, returnLength: 16
  1587. KProcessHacker: ObQueryNameString: status 0x0
  1588. KProcessHacker: KphQueryNameObject:
  1589. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000700, ObjectInformationLength: 512, returnLength: 16
  1590. KProcessHacker: ObQueryNameString: status 0x0
  1591. KProcessHacker: KphQueryNameObject:
  1592. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000704, ObjectInformationLength: 512, returnLength: 16
  1593. KProcessHacker: ObQueryNameString: status 0x0
  1594. KProcessHacker: KphQueryNameObject:
  1595. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000708, ObjectInformationLength: 512, returnLength: 16
  1596. KProcessHacker: ObQueryNameString: status 0x0
  1597. KProcessHacker: KphQueryNameObject:
  1598. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000070c, ObjectInformationLength: 512, returnLength: 16
  1599. KProcessHacker: ObQueryNameString: status 0x0
  1600. KProcessHacker: KphQueryNameObject:
  1601. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000710, ObjectInformationLength: 512, returnLength: 16
  1602. KProcessHacker: ObQueryNameString: status 0x0
  1603. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1604. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000714, ObjectInformationLength: 512, returnLength: 64
  1605. KProcessHacker: ObQueryNameString: status 0x0
  1606. KProcessHacker: KphQueryNameObject:
  1607. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000718, ObjectInformationLength: 512, returnLength: 16
  1608. KProcessHacker: ObQueryNameString: status 0x0
  1609. KProcessHacker: KphQueryNameObject: \Device\0000007a
  1610. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000071c, ObjectInformationLength: 512, returnLength: 50
  1611. KProcessHacker: ObQueryNameString: status 0x0
  1612. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1613. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000720, ObjectInformationLength: 512, returnLength: 64
  1614. KProcessHacker: ObQueryNameString: status 0x0
  1615. KProcessHacker: KphQueryNameObject:
  1616. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000724, ObjectInformationLength: 512, returnLength: 16
  1617. KProcessHacker: ObQueryNameString: status 0x0
  1618. KProcessHacker: KphQueryNameObject: \Device\00000079
  1619. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000728, ObjectInformationLength: 512, returnLength: 50
  1620. KProcessHacker: ObQueryNameString: status 0x0
  1621. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1622. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000072c, ObjectInformationLength: 512, returnLength: 64
  1623. KProcessHacker: ObQueryNameString: status 0x0
  1624. KProcessHacker: KphQueryNameObject:
  1625. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000730, ObjectInformationLength: 512, returnLength: 16
  1626. KProcessHacker: ObQueryNameString: status 0x0
  1627. KProcessHacker: KphQueryNameObject: \Device\00000068
  1628. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000734, ObjectInformationLength: 512, returnLength: 50
  1629. KProcessHacker: ObQueryNameString: status 0x0
  1630. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1631. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000738, ObjectInformationLength: 512, returnLength: 64
  1632. KProcessHacker: ObQueryNameString: status 0x0
  1633. KProcessHacker: KphQueryNameObject:
  1634. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000740, ObjectInformationLength: 512, returnLength: 16
  1635. KProcessHacker: ObQueryNameString: status 0x0
  1636. KProcessHacker: KphQueryNameObject:
  1637. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000744, ObjectInformationLength: 512, returnLength: 16
  1638. KProcessHacker: ObQueryNameString: status 0x0
  1639. KProcessHacker: KphQueryNameObject:
  1640. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000748, ObjectInformationLength: 512, returnLength: 16
  1641. KProcessHacker: ObQueryNameString: status 0x0
  1642. KProcessHacker: KphQueryNameObject:
  1643. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000074c, ObjectInformationLength: 512, returnLength: 16
  1644. KProcessHacker: ObQueryNameString: status 0x0
  1645. KProcessHacker: KphQueryNameObject:
  1646. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000750, ObjectInformationLength: 512, returnLength: 16
  1647. KProcessHacker: ObQueryNameString: status 0x0
  1648. KProcessHacker: KphQueryNameObject:
  1649. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000754, ObjectInformationLength: 512, returnLength: 16
  1650. KProcessHacker: ObQueryNameString: status 0x0
  1651. KProcessHacker: KphQueryNameObject:
  1652. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000758, ObjectInformationLength: 512, returnLength: 16
  1653. KProcessHacker: ObQueryNameString: status 0x0
  1654. KProcessHacker: KphQueryNameObject:
  1655. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000075c, ObjectInformationLength: 512, returnLength: 16
  1656. KProcessHacker: ObQueryNameString: status 0x0
  1657. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1658. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000760, ObjectInformationLength: 512, returnLength: 64
  1659. KProcessHacker: ObQueryNameString: status 0x0
  1660. KProcessHacker: KphQueryNameObject: \Disconnect
  1661. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000764, ObjectInformationLength: 512, returnLength: 40
  1662. KProcessHacker: ObQueryNameString: status 0x0
  1663. KProcessHacker: KphQueryNameObject:
  1664. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000768, ObjectInformationLength: 512, returnLength: 16
  1665. KProcessHacker: ObQueryNameString: status 0x0
  1666. KProcessHacker: KphQueryNameObject: \Device\00000067
  1667. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000076c, ObjectInformationLength: 512, returnLength: 50
  1668. KProcessHacker: ObQueryNameString: status 0x0
  1669. KProcessHacker: KphQueryNameObject:
  1670. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000770, ObjectInformationLength: 512, returnLength: 16
  1671. KProcessHacker: ObQueryNameString: status 0x0
  1672. KProcessHacker: KphQueryNameObject:
  1673. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000774, ObjectInformationLength: 512, returnLength: 16
  1674. KProcessHacker: ObQueryNameString: status 0x0
  1675. KProcessHacker: KphQueryNameObject:
  1676. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000778, ObjectInformationLength: 512, returnLength: 16
  1677. KProcessHacker: ObQueryNameString: status 0x0
  1678. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1679. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000077c, ObjectInformationLength: 512, returnLength: 64
  1680. KProcessHacker: ObQueryNameString: status 0x0
  1681. KProcessHacker: KphQueryNameObject:
  1682. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000780, ObjectInformationLength: 512, returnLength: 16
  1683. KProcessHacker: ObQueryNameString: status 0x0
  1684. KProcessHacker: KphQueryNameObject:
  1685. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000784, ObjectInformationLength: 512, returnLength: 16
  1686. KProcessHacker: ObQueryNameString: status 0x0
  1687. KProcessHacker: KphQueryNameObject:
  1688. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000788, ObjectInformationLength: 512, returnLength: 16
  1689. KProcessHacker: ObQueryNameString: status 0x0
  1690. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1691. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000078c, ObjectInformationLength: 512, returnLength: 64
  1692. KProcessHacker: ObQueryNameString: status 0x0
  1693. KProcessHacker: KphQueryNameObject:
  1694. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000790, ObjectInformationLength: 512, returnLength: 16
  1695. KProcessHacker: ObQueryNameString: status 0x0
  1696. KProcessHacker: KphQueryNameObject:
  1697. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000794, ObjectInformationLength: 512, returnLength: 16
  1698. KProcessHacker: ObQueryNameString: status 0x0
  1699. KProcessHacker: KphQueryNameObject:
  1700. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000798, ObjectInformationLength: 512, returnLength: 16
  1701. KProcessHacker: ObQueryNameString: status 0x0
  1702. KProcessHacker: KphQueryNameObject:
  1703. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000079c, ObjectInformationLength: 512, returnLength: 16
  1704. KProcessHacker: ObQueryNameString: status 0x0
  1705. KProcessHacker: KphQueryNameObject:
  1706. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007a0, ObjectInformationLength: 512, returnLength: 16
  1707. KProcessHacker: ObQueryNameString: status 0x0
  1708. KProcessHacker: KphQueryNameObject:
  1709. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007a4, ObjectInformationLength: 512, returnLength: 16
  1710. KProcessHacker: ObQueryNameString: status 0x0
  1711. KProcessHacker: KphQueryNameObject:
  1712. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007a8, ObjectInformationLength: 512, returnLength: 16
  1713. KProcessHacker: ObQueryNameString: status 0x0
  1714. KProcessHacker: KphQueryNameObject:
  1715. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007ac, ObjectInformationLength: 512, returnLength: 16
  1716. KProcessHacker: ObQueryNameString: status 0x0
  1717. KProcessHacker: KphQueryNameObject:
  1718. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007b0, ObjectInformationLength: 512, returnLength: 16
  1719. KProcessHacker: ObQueryNameString: status 0x0
  1720. KProcessHacker: KphQueryNameObject:
  1721. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007b4, ObjectInformationLength: 512, returnLength: 16
  1722. KProcessHacker: ObQueryNameString: status 0x0
  1723. KProcessHacker: KphQueryNameObject:
  1724. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007b8, ObjectInformationLength: 512, returnLength: 16
  1725. KProcessHacker: ObQueryNameString: status 0x0
  1726. KProcessHacker: KphQueryNameObject:
  1727. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007bc, ObjectInformationLength: 512, returnLength: 16
  1728. KProcessHacker: ObQueryNameString: status 0x0
  1729. KProcessHacker: KphQueryNameObject:
  1730. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007c0, ObjectInformationLength: 512, returnLength: 16
  1731. KProcessHacker: ObQueryNameString: status 0x0
  1732. KProcessHacker: KphQueryNameObject:
  1733. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007c4, ObjectInformationLength: 512, returnLength: 16
  1734. KProcessHacker: ObQueryNameString: status 0x0
  1735. KProcessHacker: KphQueryNameObject:
  1736. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007c8, ObjectInformationLength: 512, returnLength: 16
  1737. KProcessHacker: ObQueryNameString: status 0x0
  1738. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1739. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007cc, ObjectInformationLength: 512, returnLength: 64
  1740. KProcessHacker: ObQueryNameString: status 0x0
  1741. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  1742. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007d0, ObjectInformationLength: 512, returnLength: 64
  1743. KProcessHacker: ObQueryNameString: status 0x0
  1744. KProcessHacker: KphQueryNameObject:
  1745. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007d4, ObjectInformationLength: 512, returnLength: 16
  1746. KProcessHacker: ObQueryNameString: status 0x0
  1747. KProcessHacker: KphQueryNameObject:
  1748. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007d8, ObjectInformationLength: 512, returnLength: 16
  1749. KProcessHacker: ObQueryNameString: status 0x0
  1750. KProcessHacker: KphQueryNameObject:
  1751. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007dc, ObjectInformationLength: 512, returnLength: 16
  1752. KProcessHacker: ObQueryNameString: status 0x0
  1753. KProcessHacker: KphQueryNameObject:
  1754. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007e0, ObjectInformationLength: 512, returnLength: 16
  1755. KProcessHacker: ObQueryNameString: status 0x0
  1756. KProcessHacker: KphQueryNameObject:
  1757. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007e4, ObjectInformationLength: 512, returnLength: 16
  1758. KProcessHacker: ObQueryNameString: status 0x0
  1759. KProcessHacker: KphQueryNameObject:
  1760. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007e8, ObjectInformationLength: 512, returnLength: 16
  1761. KProcessHacker: ObQueryNameString: status 0x0
  1762. KProcessHacker: KphQueryNameObject:
  1763. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007ec, ObjectInformationLength: 512, returnLength: 16
  1764. KProcessHacker: ObQueryNameString: status 0x0
  1765. KProcessHacker: KphQueryNameObject:
  1766. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007f0, ObjectInformationLength: 512, returnLength: 16
  1767. KProcessHacker: ObQueryNameString: status 0x0
  1768. KProcessHacker: KphQueryNameObject:
  1769. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007f4, ObjectInformationLength: 512, returnLength: 16
  1770. KProcessHacker: ObQueryNameString: status 0x0
  1771. KProcessHacker: KphQueryNameObject:
  1772. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007f8, ObjectInformationLength: 512, returnLength: 16
  1773. KProcessHacker: ObQueryNameString: status 0x0
  1774. KProcessHacker: KphQueryNameObject:
  1775. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800007fc, ObjectInformationLength: 512, returnLength: 16
  1776. KProcessHacker: ObQueryNameString: status 0x0
  1777. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SECURITY
  1778. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000804, ObjectInformationLength: 512, returnLength: 130
  1779. KProcessHacker: ObQueryNameString: status 0x0
  1780. KProcessHacker: KphQueryNameObject: \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Global
  1781. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000808, ObjectInformationLength: 512, returnLength: 268
  1782. KProcessHacker: ObQueryNameString: status 0x0
  1783. KProcessHacker: KphQueryNameObject: \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Session
  1784. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000080c, ObjectInformationLength: 512, returnLength: 270
  1785. KProcessHacker: ObQueryNameString: status 0x0
  1786. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SAM
  1787. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000810, ObjectInformationLength: 512, returnLength: 120
  1788. KProcessHacker: ObQueryNameString: status 0x0
  1789. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SECURITY.LOG1
  1790. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000814, ObjectInformationLength: 512, returnLength: 140
  1791. KProcessHacker: ObQueryNameString: status 0x0
  1792. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SECURITY.LOG2
  1793. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000818, ObjectInformationLength: 512, returnLength: 140
  1794. KProcessHacker: ObQueryNameString: status 0x0
  1795. KProcessHacker: KphQueryNameObject:
  1796. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000081c, ObjectInformationLength: 512, returnLength: 16
  1797. KProcessHacker: ObQueryNameString: status 0x0
  1798. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderApiLogger.etl
  1799. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000820, ObjectInformationLength: 512, returnLength: 196
  1800. KProcessHacker: ObQueryNameString: status 0x0
  1801. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SAM.LOG1
  1802. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000824, ObjectInformationLength: 512, returnLength: 130
  1803. KProcessHacker: ObQueryNameString: status 0x0
  1804. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\SAM.LOG2
  1805. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000828, ObjectInformationLength: 512, returnLength: 130
  1806. KProcessHacker: ObQueryNameString: status 0x0
  1807. KProcessHacker: KphQueryNameObject:
  1808. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000082c, ObjectInformationLength: 512, returnLength: 16
  1809. KProcessHacker: ObQueryNameString: status 0x0
  1810. KProcessHacker: KphQueryNameObject: \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Local
  1811. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000830, ObjectInformationLength: 512, returnLength: 266
  1812. KProcessHacker: ObQueryNameString: status 0x0
  1813. KProcessHacker: KphQueryNameObject: \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\RPC Control
  1814. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000834, ObjectInformationLength: 512, returnLength: 278
  1815. KProcessHacker: ObQueryNameString: status 0x0
  1816. KProcessHacker: KphQueryNameObject:
  1817. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000838, ObjectInformationLength: 512, returnLength: 16
  1818. KProcessHacker: ObQueryNameString: status 0x0
  1819. KProcessHacker: KphQueryNameObject:
  1820. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000083c, ObjectInformationLength: 512, returnLength: 16
  1821. KProcessHacker: ObQueryNameString: status 0x0
  1822. KProcessHacker: KphQueryNameObject:
  1823. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000840, ObjectInformationLength: 512, returnLength: 16
  1824. KProcessHacker: ObQueryNameString: status 0x0
  1825. KProcessHacker: KphQueryNameObject: \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523
  1826. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000844, ObjectInformationLength: 512, returnLength: 254
  1827. KProcessHacker: ObQueryNameString: status 0x0
  1828. KProcessHacker: KphQueryNameObject: \Device\NamedPipe
  1829. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000848, ObjectInformationLength: 512, returnLength: 52
  1830. KProcessHacker: ObQueryNameString: status 0x0
  1831. KProcessHacker: KphQueryNameObject: \Sessions\0\DosDevices\00000000-0000af32
  1832. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000084c, ObjectInformationLength: 512, returnLength: 98
  1833. KProcessHacker: ObQueryNameString: status 0x0
  1834. KProcessHacker: KphQueryNameObject:
  1835. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000850, ObjectInformationLength: 512, returnLength: 16
  1836. KProcessHacker: ObQueryNameString: status 0x0
  1837. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Quota System
  1838. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000854, ObjectInformationLength: 512, returnLength: 168
  1839. KProcessHacker: ObQueryNameString: status 0x0
  1840. KProcessHacker: KphQueryNameObject:
  1841. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000858, ObjectInformationLength: 512, returnLength: 16
  1842. KProcessHacker: ObQueryNameString: status 0x0
  1843. KProcessHacker: KphQueryNameObject:
  1844. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000085c, ObjectInformationLength: 512, returnLength: 16
  1845. KProcessHacker: ObQueryNameString: status 0x0
  1846. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523
  1847. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000860, ObjectInformationLength: 512, returnLength: 254
  1848. KProcessHacker: ObQueryNameString: status 0x0
  1849. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\RPC Control
  1850. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000864, ObjectInformationLength: 512, returnLength: 278
  1851. KProcessHacker: ObQueryNameString: status 0x0
  1852. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Local
  1853. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000868, ObjectInformationLength: 512, returnLength: 266
  1854. KProcessHacker: ObQueryNameString: status 0x0
  1855. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Global
  1856. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000086c, ObjectInformationLength: 512, returnLength: 268
  1857. KProcessHacker: ObQueryNameString: status 0x0
  1858. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\Session
  1859. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000870, ObjectInformationLength: 512, returnLength: 270
  1860. KProcessHacker: ObQueryNameString: status 0x0
  1861. KProcessHacker: KphQueryNameObject: \Device\NamedPipe
  1862. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000874, ObjectInformationLength: 512, returnLength: 52
  1863. KProcessHacker: ObQueryNameString: status 0x0
  1864. KProcessHacker: KphQueryNameObject:
  1865. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000878, ObjectInformationLength: 512, returnLength: 16
  1866. KProcessHacker: ObQueryNameString: status 0x0
  1867. KProcessHacker: KphQueryNameObject:
  1868. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000087c, ObjectInformationLength: 512, returnLength: 16
  1869. KProcessHacker: ObQueryNameString: status 0x0
  1870. KProcessHacker: KphQueryNameObject:
  1871. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000880, ObjectInformationLength: 512, returnLength: 16
  1872. KProcessHacker: ObQueryNameString: status 0x0
  1873. KProcessHacker: KphQueryNameObject:
  1874. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000884, ObjectInformationLength: 512, returnLength: 16
  1875. KProcessHacker: ObQueryNameString: status 0x0
  1876. KProcessHacker: KphQueryNameObject:
  1877. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000888, ObjectInformationLength: 512, returnLength: 16
  1878. KProcessHacker: ObQueryNameString: status 0x0
  1879. KProcessHacker: KphQueryNameObject:
  1880. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000088c, ObjectInformationLength: 512, returnLength: 16
  1881. KProcessHacker: ObQueryNameString: status 0x0
  1882. KProcessHacker: KphQueryNameObject:
  1883. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000890, ObjectInformationLength: 512, returnLength: 16
  1884. KProcessHacker: ObQueryNameString: status 0x0
  1885. KProcessHacker: KphQueryNameObject:
  1886. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000894, ObjectInformationLength: 512, returnLength: 16
  1887. KProcessHacker: ObQueryNameString: status 0x0
  1888. KProcessHacker: KphQueryNameObject:
  1889. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000898, ObjectInformationLength: 512, returnLength: 16
  1890. KProcessHacker: ObQueryNameString: status 0x0
  1891. KProcessHacker: KphQueryNameObject:
  1892. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000089c, ObjectInformationLength: 512, returnLength: 16
  1893. KProcessHacker: ObQueryNameString: status 0x0
  1894. KProcessHacker: KphQueryNameObject: \Sessions\0\DosDevices\00000000-0000af58
  1895. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008a0, ObjectInformationLength: 512, returnLength: 98
  1896. KProcessHacker: ObQueryNameString: status 0x0
  1897. KProcessHacker: KphQueryNameObject:
  1898. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008a4, ObjectInformationLength: 512, returnLength: 16
  1899. KProcessHacker: ObQueryNameString: status 0x0
  1900. KProcessHacker: KphQueryNameObject:
  1901. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008a8, ObjectInformationLength: 512, returnLength: 16
  1902. KProcessHacker: ObQueryNameString: status 0x0
  1903. KProcessHacker: KphQueryNameObject:
  1904. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008ac, ObjectInformationLength: 512, returnLength: 16
  1905. KProcessHacker: ObQueryNameString: status 0x0
  1906. KProcessHacker: KphQueryNameObject:
  1907. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008b0, ObjectInformationLength: 512, returnLength: 16
  1908. KProcessHacker: ObQueryNameString: status 0x0
  1909. KProcessHacker: KphQueryNameObject:
  1910. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008b4, ObjectInformationLength: 512, returnLength: 16
  1911. KProcessHacker: ObQueryNameString: status 0x0
  1912. KProcessHacker: KphQueryNameObject:
  1913. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008b8, ObjectInformationLength: 512, returnLength: 16
  1914. KProcessHacker: ObQueryNameString: status 0x0
  1915. KProcessHacker: KphQueryNameObject:
  1916. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008bc, ObjectInformationLength: 512, returnLength: 16
  1917. KProcessHacker: ObQueryNameString: status 0x0
  1918. KProcessHacker: KphQueryNameObject:
  1919. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008c0, ObjectInformationLength: 512, returnLength: 16
  1920. KProcessHacker: ObQueryNameString: status 0x0
  1921. KProcessHacker: KphQueryNameObject:
  1922. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008c4, ObjectInformationLength: 512, returnLength: 16
  1923. KProcessHacker: ObQueryNameString: status 0x0
  1924. KProcessHacker: KphQueryNameObject:
  1925. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008c8, ObjectInformationLength: 512, returnLength: 16
  1926. KProcessHacker: ObQueryNameString: status 0x0
  1927. KProcessHacker: KphQueryNameObject:
  1928. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008cc, ObjectInformationLength: 512, returnLength: 16
  1929. KProcessHacker: ObQueryNameString: status 0x0
  1930. KProcessHacker: KphQueryNameObject:
  1931. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008d0, ObjectInformationLength: 512, returnLength: 16
  1932. KProcessHacker: ObQueryNameString: status 0x0
  1933. KProcessHacker: KphQueryNameObject:
  1934. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008d4, ObjectInformationLength: 512, returnLength: 16
  1935. KProcessHacker: ObQueryNameString: status 0x0
  1936. KProcessHacker: KphQueryNameObject:
  1937. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008d8, ObjectInformationLength: 512, returnLength: 16
  1938. KProcessHacker: ObQueryNameString: status 0x0
  1939. KProcessHacker: KphQueryNameObject:
  1940. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008dc, ObjectInformationLength: 512, returnLength: 16
  1941. KProcessHacker: ObQueryNameString: status 0x0
  1942. KProcessHacker: KphQueryNameObject:
  1943. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008e0, ObjectInformationLength: 512, returnLength: 16
  1944. KProcessHacker: ObQueryNameString: status 0x0
  1945. KProcessHacker: KphQueryNameObject:
  1946. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008e4, ObjectInformationLength: 512, returnLength: 16
  1947. KProcessHacker: ObQueryNameString: status 0x0
  1948. KProcessHacker: KphQueryNameObject:
  1949. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008e8, ObjectInformationLength: 512, returnLength: 16
  1950. KProcessHacker: ObQueryNameString: status 0x0
  1951. KProcessHacker: KphQueryNameObject:
  1952. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008ec, ObjectInformationLength: 512, returnLength: 16
  1953. KProcessHacker: ObQueryNameString: status 0x0
  1954. KProcessHacker: KphQueryNameObject:
  1955. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008f0, ObjectInformationLength: 512, returnLength: 16
  1956. KProcessHacker: ObQueryNameString: status 0x0
  1957. KProcessHacker: KphQueryNameObject:
  1958. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008f4, ObjectInformationLength: 512, returnLength: 16
  1959. KProcessHacker: ObQueryNameString: status 0x0
  1960. KProcessHacker: KphQueryNameObject:
  1961. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008f8, ObjectInformationLength: 512, returnLength: 16
  1962. KProcessHacker: ObQueryNameString: status 0x0
  1963. KProcessHacker: KphQueryNameObject:
  1964. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800008fc, ObjectInformationLength: 512, returnLength: 16
  1965. KProcessHacker: ObQueryNameString: status 0x0
  1966. KProcessHacker: KphQueryNameObject:
  1967. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000900, ObjectInformationLength: 512, returnLength: 16
  1968. KProcessHacker: ObQueryNameString: status 0x0
  1969. KProcessHacker: KphQueryNameObject:
  1970. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000904, ObjectInformationLength: 512, returnLength: 16
  1971. KProcessHacker: ObQueryNameString: status 0x0
  1972. KProcessHacker: KphQueryNameObject:
  1973. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000908, ObjectInformationLength: 512, returnLength: 16
  1974. KProcessHacker: ObQueryNameString: status 0x0
  1975. KProcessHacker: KphQueryNameObject:
  1976. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000090c, ObjectInformationLength: 512, returnLength: 16
  1977. KProcessHacker: ObQueryNameString: status 0x0
  1978. KProcessHacker: KphQueryNameObject:
  1979. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000910, ObjectInformationLength: 512, returnLength: 16
  1980. KProcessHacker: ObQueryNameString: status 0x0
  1981. KProcessHacker: KphQueryNameObject:
  1982. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000914, ObjectInformationLength: 512, returnLength: 16
  1983. KProcessHacker: ObQueryNameString: status 0x0
  1984. KProcessHacker: KphQueryNameObject:
  1985. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000918, ObjectInformationLength: 512, returnLength: 16
  1986. KProcessHacker: ObQueryNameString: status 0x0
  1987. KProcessHacker: KphQueryNameObject:
  1988. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000091c, ObjectInformationLength: 512, returnLength: 16
  1989. KProcessHacker: ObQueryNameString: status 0x0
  1990. KProcessHacker: KphQueryNameObject:
  1991. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000920, ObjectInformationLength: 512, returnLength: 16
  1992. KProcessHacker: ObQueryNameString: status 0x0
  1993. KProcessHacker: KphQueryNameObject:
  1994. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000924, ObjectInformationLength: 512, returnLength: 16
  1995. KProcessHacker: ObQueryNameString: status 0x0
  1996. KProcessHacker: KphQueryNameObject:
  1997. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000928, ObjectInformationLength: 512, returnLength: 16
  1998. KProcessHacker: ObQueryNameString: status 0x0
  1999. KProcessHacker: KphQueryNameObject:
  2000. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000092c, ObjectInformationLength: 512, returnLength: 16
  2001. KProcessHacker: ObQueryNameString: status 0x0
  2002. KProcessHacker: KphQueryNameObject:
  2003. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000930, ObjectInformationLength: 512, returnLength: 16
  2004. KProcessHacker: ObQueryNameString: status 0x0
  2005. KProcessHacker: KphQueryNameObject: \clfs
  2006. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000934, ObjectInformationLength: 512, returnLength: 28
  2007. KProcessHacker: ObQueryNameString: status 0x0
  2008. KProcessHacker: KphQueryNameObject: \clfs
  2009. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000938, ObjectInformationLength: 512, returnLength: 28
  2010. KProcessHacker: ObQueryNameString: status 0x0
  2011. KProcessHacker: KphQueryNameObject:
  2012. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000093c, ObjectInformationLength: 512, returnLength: 16
  2013. KProcessHacker: ObQueryNameString: status 0x0
  2014. KProcessHacker: KphQueryNameObject:
  2015. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000940, ObjectInformationLength: 512, returnLength: 16
  2016. KProcessHacker: ObQueryNameString: status 0x0
  2017. KProcessHacker: KphQueryNameObject:
  2018. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000944, ObjectInformationLength: 512, returnLength: 16
  2019. KProcessHacker: ObQueryNameString: status 0x0
  2020. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
  2021. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000948, ObjectInformationLength: 512, returnLength: 164
  2022. KProcessHacker: ObQueryNameString: status 0x0
  2023. KProcessHacker: KphQueryNameObject:
  2024. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000094c, ObjectInformationLength: 512, returnLength: 16
  2025. KProcessHacker: ObQueryNameString: status 0x0
  2026. KProcessHacker: KphQueryNameObject:
  2027. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000950, ObjectInformationLength: 512, returnLength: 16
  2028. KProcessHacker: ObQueryNameString: status 0x0
  2029. KProcessHacker: KphQueryNameObject:
  2030. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000954, ObjectInformationLength: 512, returnLength: 16
  2031. KProcessHacker: ObQueryNameString: status 0x0
  2032. KProcessHacker: KphQueryNameObject:
  2033. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000958, ObjectInformationLength: 512, returnLength: 16
  2034. KProcessHacker: ObQueryNameString: status 0x0
  2035. KProcessHacker: KphQueryNameObject:
  2036. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000095c, ObjectInformationLength: 512, returnLength: 16
  2037. KProcessHacker: ObQueryNameString: status 0x0
  2038. KProcessHacker: KphQueryNameObject: \Sessions\0\DosDevices\00000000-000003e4
  2039. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000960, ObjectInformationLength: 512, returnLength: 98
  2040. KProcessHacker: ObQueryNameString: status 0x0
  2041. KProcessHacker: KphQueryNameObject:
  2042. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000964, ObjectInformationLength: 512, returnLength: 16
  2043. KProcessHacker: ObQueryNameString: status 0x0
  2044. KProcessHacker: KphQueryNameObject:
  2045. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000968, ObjectInformationLength: 512, returnLength: 16
  2046. KProcessHacker: ObQueryNameString: status 0x0
  2047. KProcessHacker: KphQueryNameObject:
  2048. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000096c, ObjectInformationLength: 512, returnLength: 16
  2049. KProcessHacker: ObQueryNameString: status 0x0
  2050. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\Terminal-Services-LSM-20181218-125727.etl
  2051. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000970, ObjectInformationLength: 512, returnLength: 208
  2052. KProcessHacker: ObQueryNameString: status 0x0
  2053. KProcessHacker: KphQueryNameObject:
  2054. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000974, ObjectInformationLength: 512, returnLength: 16
  2055. KProcessHacker: ObQueryNameString: status 0x0
  2056. KProcessHacker: KphQueryNameObject:
  2057. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000978, ObjectInformationLength: 512, returnLength: 16
  2058. KProcessHacker: ObQueryNameString: status 0x0
  2059. KProcessHacker: KphQueryNameObject:
  2060. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000097c, ObjectInformationLength: 512, returnLength: 16
  2061. KProcessHacker: ObQueryNameString: status 0x0
  2062. KProcessHacker: KphQueryNameObject:
  2063. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000980, ObjectInformationLength: 512, returnLength: 16
  2064. KProcessHacker: ObQueryNameString: status 0x0
  2065. KProcessHacker: KphQueryNameObject:
  2066. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000984, ObjectInformationLength: 512, returnLength: 16
  2067. KProcessHacker: ObQueryNameString: status 0x0
  2068. KProcessHacker: KphQueryNameObject:
  2069. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000988, ObjectInformationLength: 512, returnLength: 16
  2070. KProcessHacker: ObQueryNameString: status 0x0
  2071. KProcessHacker: KphQueryNameObject:
  2072. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000098c, ObjectInformationLength: 512, returnLength: 16
  2073. KProcessHacker: ObQueryNameString: status 0x0
  2074. KProcessHacker: KphQueryNameObject:
  2075. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000990, ObjectInformationLength: 512, returnLength: 16
  2076. KProcessHacker: ObQueryNameString: status 0x0
  2077. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\VolatileNotifications
  2078. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000994, ObjectInformationLength: 512, returnLength: 186
  2079. KProcessHacker: ObQueryNameString: status 0x0
  2080. KProcessHacker: KphQueryNameObject:
  2081. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000998, ObjectInformationLength: 512, returnLength: 16
  2082. KProcessHacker: ObQueryNameString: status 0x0
  2083. KProcessHacker: KphQueryNameObject:
  2084. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000099c, ObjectInformationLength: 512, returnLength: 16
  2085. KProcessHacker: ObQueryNameString: status 0x0
  2086. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\Terminal-Services-RCM-20181218-125727.etl
  2087. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009a0, ObjectInformationLength: 512, returnLength: 208
  2088. KProcessHacker: ObQueryNameString: status 0x0
  2089. KProcessHacker: KphQueryNameObject:
  2090. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009a4, ObjectInformationLength: 512, returnLength: 16
  2091. KProcessHacker: ObQueryNameString: status 0x0
  2092. KProcessHacker: KphQueryNameObject:
  2093. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009a8, ObjectInformationLength: 512, returnLength: 16
  2094. KProcessHacker: ObQueryNameString: status 0x0
  2095. KProcessHacker: KphQueryNameObject:
  2096. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009ac, ObjectInformationLength: 512, returnLength: 16
  2097. KProcessHacker: ObQueryNameString: status 0x0
  2098. KProcessHacker: KphQueryNameObject:
  2099. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009b0, ObjectInformationLength: 512, returnLength: 16
  2100. KProcessHacker: ObQueryNameString: status 0x0
  2101. KProcessHacker: KphQueryNameObject:
  2102. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009b4, ObjectInformationLength: 512, returnLength: 16
  2103. KProcessHacker: ObQueryNameString: status 0x0
  2104. KProcessHacker: KphQueryNameObject:
  2105. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009b8, ObjectInformationLength: 512, returnLength: 16
  2106. KProcessHacker: ObQueryNameString: status 0x0
  2107. KProcessHacker: KphQueryNameObject:
  2108. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009bc, ObjectInformationLength: 512, returnLength: 16
  2109. KProcessHacker: ObQueryNameString: status 0x0
  2110. KProcessHacker: KphQueryNameObject:
  2111. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009c0, ObjectInformationLength: 512, returnLength: 16
  2112. KProcessHacker: ObQueryNameString: status 0x0
  2113. KProcessHacker: KphQueryNameObject:
  2114. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009c4, ObjectInformationLength: 512, returnLength: 16
  2115. KProcessHacker: ObQueryNameString: status 0x0
  2116. KProcessHacker: KphQueryNameObject:
  2117. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009c8, ObjectInformationLength: 512, returnLength: 16
  2118. KProcessHacker: ObQueryNameString: status 0x0
  2119. KProcessHacker: KphQueryNameObject:
  2120. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009cc, ObjectInformationLength: 512, returnLength: 16
  2121. KProcessHacker: ObQueryNameString: status 0x0
  2122. KProcessHacker: KphQueryNameObject: \Sessions\0\DosDevices\00000000-00010c7e
  2123. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009d0, ObjectInformationLength: 512, returnLength: 98
  2124. KProcessHacker: ObQueryNameString: status 0x0
  2125. KProcessHacker: KphQueryNameObject: \Device\NamedPipe
  2126. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009d4, ObjectInformationLength: 512, returnLength: 52
  2127. KProcessHacker: ObQueryNameString: status 0x0
  2128. KProcessHacker: KphQueryNameObject:
  2129. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009d8, ObjectInformationLength: 512, returnLength: 16
  2130. KProcessHacker: ObQueryNameString: status 0x0
  2131. KProcessHacker: KphQueryNameObject:
  2132. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009dc, ObjectInformationLength: 512, returnLength: 16
  2133. KProcessHacker: ObQueryNameString: status 0x0
  2134. KProcessHacker: KphQueryNameObject:
  2135. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009e0, ObjectInformationLength: 512, returnLength: 16
  2136. KProcessHacker: ObQueryNameString: status 0x0
  2137. KProcessHacker: KphQueryNameObject:
  2138. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009e4, ObjectInformationLength: 512, returnLength: 16
  2139. KProcessHacker: ObQueryNameString: status 0x0
  2140. KProcessHacker: KphQueryNameObject:
  2141. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009e8, ObjectInformationLength: 512, returnLength: 16
  2142. KProcessHacker: ObQueryNameString: status 0x0
  2143. KProcessHacker: KphQueryNameObject:
  2144. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009ec, ObjectInformationLength: 512, returnLength: 16
  2145. KProcessHacker: ObQueryNameString: status 0x0
  2146. KProcessHacker: KphQueryNameObject:
  2147. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009f0, ObjectInformationLength: 512, returnLength: 16
  2148. KProcessHacker: ObQueryNameString: status 0x0
  2149. KProcessHacker: KphQueryNameObject:
  2150. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009f4, ObjectInformationLength: 512, returnLength: 16
  2151. KProcessHacker: ObQueryNameString: status 0x0
  2152. KProcessHacker: KphQueryNameObject:
  2153. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009f8, ObjectInformationLength: 512, returnLength: 16
  2154. KProcessHacker: ObQueryNameString: status 0x0
  2155. KProcessHacker: KphQueryNameObject:
  2156. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff800009fc, ObjectInformationLength: 512, returnLength: 16
  2157. KProcessHacker: ObQueryNameString: status 0x0
  2158. KProcessHacker: KphQueryNameObject:
  2159. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a00, ObjectInformationLength: 512, returnLength: 16
  2160. KProcessHacker: ObQueryNameString: status 0x0
  2161. KProcessHacker: KphQueryNameObject:
  2162. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a04, ObjectInformationLength: 512, returnLength: 16
  2163. KProcessHacker: ObQueryNameString: status 0x0
  2164. KProcessHacker: KphQueryNameObject:
  2165. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a08, ObjectInformationLength: 512, returnLength: 16
  2166. KProcessHacker: ObQueryNameString: status 0x0
  2167. KProcessHacker: KphQueryNameObject: \Sessions\1\AppContainerNamedObjects\S-1-15-2-567501097-281763132-502764112-1855211022-3143306454-2372101908-561929011\Session
  2168. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a0c, ObjectInformationLength: 512, returnLength: 270
  2169. KProcessHacker: ObQueryNameString: status 0x0
  2170. KProcessHacker: KphQueryNameObject:
  2171. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a10, ObjectInformationLength: 512, returnLength: 16
  2172. KProcessHacker: ObQueryNameString: status 0x0
  2173. KProcessHacker: KphQueryNameObject:
  2174. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a14, ObjectInformationLength: 512, returnLength: 16
  2175. KProcessHacker: ObQueryNameString: status 0x0
  2176. KProcessHacker: KphQueryNameObject:
  2177. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a1c, ObjectInformationLength: 512, returnLength: 16
  2178. KProcessHacker: ObQueryNameString: status 0x0
  2179. KProcessHacker: KphQueryNameObject:
  2180. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a20, ObjectInformationLength: 512, returnLength: 16
  2181. KProcessHacker: ObQueryNameString: status 0x0
  2182. KProcessHacker: KphQueryNameObject:
  2183. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a24, ObjectInformationLength: 512, returnLength: 16
  2184. KProcessHacker: ObQueryNameString: status 0x0
  2185. KProcessHacker: KphQueryNameObject:
  2186. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a28, ObjectInformationLength: 512, returnLength: 16
  2187. KProcessHacker: ObQueryNameString: status 0x0
  2188. KProcessHacker: KphQueryNameObject:
  2189. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a2c, ObjectInformationLength: 512, returnLength: 16
  2190. KProcessHacker: ObQueryNameString: status 0x0
  2191. KProcessHacker: KphQueryNameObject:
  2192. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a30, ObjectInformationLength: 512, returnLength: 16
  2193. KProcessHacker: ObQueryNameString: status 0x0
  2194. KProcessHacker: KphQueryNameObject:
  2195. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a34, ObjectInformationLength: 512, returnLength: 16
  2196. KProcessHacker: ObQueryNameString: status 0x0
  2197. KProcessHacker: KphQueryNameObject:
  2198. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a38, ObjectInformationLength: 512, returnLength: 16
  2199. KProcessHacker: ObQueryNameString: status 0x0
  2200. KProcessHacker: KphQueryNameObject:
  2201. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a3c, ObjectInformationLength: 512, returnLength: 16
  2202. KProcessHacker: ObQueryNameString: status 0x0
  2203. KProcessHacker: KphQueryNameObject:
  2204. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a40, ObjectInformationLength: 512, returnLength: 16
  2205. KProcessHacker: ObQueryNameString: status 0x0
  2206. KProcessHacker: KphQueryNameObject:
  2207. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a44, ObjectInformationLength: 512, returnLength: 16
  2208. KProcessHacker: ObQueryNameString: status 0x0
  2209. KProcessHacker: KphQueryNameObject:
  2210. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a48, ObjectInformationLength: 512, returnLength: 16
  2211. KProcessHacker: ObQueryNameString: status 0x0
  2212. KProcessHacker: KphQueryNameObject:
  2213. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a4c, ObjectInformationLength: 512, returnLength: 16
  2214. KProcessHacker: ObQueryNameString: status 0x0
  2215. KProcessHacker: KphQueryNameObject:
  2216. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a50, ObjectInformationLength: 512, returnLength: 16
  2217. KProcessHacker: ObQueryNameString: status 0x0
  2218. KProcessHacker: KphQueryNameObject:
  2219. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a54, ObjectInformationLength: 512, returnLength: 16
  2220. KProcessHacker: ObQueryNameString: status 0x0
  2221. KProcessHacker: KphQueryNameObject:
  2222. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a58, ObjectInformationLength: 512, returnLength: 16
  2223. KProcessHacker: ObQueryNameString: status 0x0
  2224. KProcessHacker: KphQueryNameObject:
  2225. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a5c, ObjectInformationLength: 512, returnLength: 16
  2226. KProcessHacker: ObQueryNameString: status 0x0
  2227. KProcessHacker: KphQueryNameObject:
  2228. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a60, ObjectInformationLength: 512, returnLength: 16
  2229. KProcessHacker: ObQueryNameString: status 0x0
  2230. KProcessHacker: KphQueryNameObject:
  2231. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a64, ObjectInformationLength: 512, returnLength: 16
  2232. KProcessHacker: ObQueryNameString: status 0x0
  2233. KProcessHacker: KphQueryNameObject:
  2234. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a68, ObjectInformationLength: 512, returnLength: 16
  2235. KProcessHacker: ObQueryNameString: status 0x0
  2236. KProcessHacker: KphQueryNameObject:
  2237. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a6c, ObjectInformationLength: 512, returnLength: 16
  2238. KProcessHacker: ObQueryNameString: status 0x0
  2239. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\BBI
  2240. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a70, ObjectInformationLength: 512, returnLength: 120
  2241. KProcessHacker: ObQueryNameString: status 0x0
  2242. KProcessHacker: KphQueryNameObject:
  2243. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a74, ObjectInformationLength: 512, returnLength: 16
  2244. KProcessHacker: ObQueryNameString: status 0x0
  2245. KProcessHacker: KphQueryNameObject:
  2246. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a78, ObjectInformationLength: 512, returnLength: 16
  2247. KProcessHacker: ObQueryNameString: status 0x0
  2248. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\BBI.LOG1
  2249. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a7c, ObjectInformationLength: 512, returnLength: 130
  2250. KProcessHacker: ObQueryNameString: status 0x0
  2251. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\config\BBI.LOG2
  2252. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a80, ObjectInformationLength: 512, returnLength: 130
  2253. KProcessHacker: ObQueryNameString: status 0x0
  2254. KProcessHacker: KphQueryNameObject:
  2255. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a84, ObjectInformationLength: 512, returnLength: 16
  2256. KProcessHacker: ObQueryNameString: status 0x0
  2257. KProcessHacker: KphQueryNameObject:
  2258. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a88, ObjectInformationLength: 512, returnLength: 16
  2259. KProcessHacker: ObQueryNameString: status 0x0
  2260. KProcessHacker: KphQueryNameObject:
  2261. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a8c, ObjectInformationLength: 512, returnLength: 16
  2262. KProcessHacker: ObQueryNameString: status 0x0
  2263. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT
  2264. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a90, ObjectInformationLength: 512, returnLength: 160
  2265. KProcessHacker: ObQueryNameString: status 0x0
  2266. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000002.regtrans-ms
  2267. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a94, ObjectInformationLength: 512, returnLength: 324
  2268. KProcessHacker: ObQueryNameString: status 0x0
  2269. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000001.regtrans-ms
  2270. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a98, ObjectInformationLength: 512, returnLength: 324
  2271. KProcessHacker: ObQueryNameString: status 0x0
  2272. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TM.blf
  2273. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000a9c, ObjectInformationLength: 512, returnLength: 250
  2274. KProcessHacker: ObQueryNameString: status 0x0
  2275. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1
  2276. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000aa0, ObjectInformationLength: 512, returnLength: 170
  2277. KProcessHacker: ObQueryNameString: status 0x0
  2278. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2
  2279. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000aa4, ObjectInformationLength: 512, returnLength: 170
  2280. KProcessHacker: ObQueryNameString: status 0x0
  2281. KProcessHacker: KphQueryNameObject:
  2282. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000aa8, ObjectInformationLength: 512, returnLength: 16
  2283. KProcessHacker: ObQueryNameString: status 0x0
  2284. KProcessHacker: KphQueryNameObject: \clfs
  2285. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000aac, ObjectInformationLength: 512, returnLength: 28
  2286. KProcessHacker: ObQueryNameString: status 0x0
  2287. KProcessHacker: KphQueryNameObject: \clfs
  2288. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ab0, ObjectInformationLength: 512, returnLength: 28
  2289. KProcessHacker: ObQueryNameString: status 0x0
  2290. KProcessHacker: KphQueryNameObject:
  2291. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ab4, ObjectInformationLength: 512, returnLength: 16
  2292. KProcessHacker: ObQueryNameString: status 0x0
  2293. KProcessHacker: KphQueryNameObject:
  2294. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ab8, ObjectInformationLength: 512, returnLength: 16
  2295. KProcessHacker: ObQueryNameString: status 0x0
  2296. KProcessHacker: KphQueryNameObject:
  2297. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000abc, ObjectInformationLength: 512, returnLength: 16
  2298. KProcessHacker: ObQueryNameString: status 0x0
  2299. KProcessHacker: KphQueryNameObject:
  2300. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ac0, ObjectInformationLength: 512, returnLength: 16
  2301. KProcessHacker: ObQueryNameString: status 0x0
  2302. KProcessHacker: KphQueryNameObject:
  2303. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ac4, ObjectInformationLength: 512, returnLength: 16
  2304. KProcessHacker: ObQueryNameString: status 0x0
  2305. KProcessHacker: KphQueryNameObject: \Sessions\0\DosDevices\00000000-000003e5
  2306. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ac8, ObjectInformationLength: 512, returnLength: 98
  2307. KProcessHacker: ObQueryNameString: status 0x0
  2308. KProcessHacker: KphQueryNameObject:
  2309. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000acc, ObjectInformationLength: 512, returnLength: 16
  2310. KProcessHacker: ObQueryNameString: status 0x0
  2311. KProcessHacker: KphQueryNameObject:
  2312. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ad0, ObjectInformationLength: 512, returnLength: 16
  2313. KProcessHacker: ObQueryNameString: status 0x0
  2314. KProcessHacker: KphQueryNameObject:
  2315. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ad4, ObjectInformationLength: 512, returnLength: 16
  2316. KProcessHacker: ObQueryNameString: status 0x0
  2317. KProcessHacker: KphQueryNameObject:
  2318. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ad8, ObjectInformationLength: 512, returnLength: 16
  2319. KProcessHacker: ObQueryNameString: status 0x0
  2320. KProcessHacker: KphQueryNameObject:
  2321. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000adc, ObjectInformationLength: 512, returnLength: 16
  2322. KProcessHacker: ObQueryNameString: status 0x0
  2323. KProcessHacker: KphQueryNameObject:
  2324. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ae0, ObjectInformationLength: 512, returnLength: 16
  2325. KProcessHacker: ObQueryNameString: status 0x0
  2326. KProcessHacker: KphQueryNameObject:
  2327. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ae4, ObjectInformationLength: 512, returnLength: 16
  2328. KProcessHacker: ObQueryNameString: status 0x0
  2329. KProcessHacker: KphQueryNameObject:
  2330. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ae8, ObjectInformationLength: 512, returnLength: 16
  2331. KProcessHacker: ObQueryNameString: status 0x0
  2332. KProcessHacker: KphQueryNameObject:
  2333. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000aec, ObjectInformationLength: 512, returnLength: 16
  2334. KProcessHacker: ObQueryNameString: status 0x0
  2335. KProcessHacker: KphQueryNameObject:
  2336. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000af0, ObjectInformationLength: 512, returnLength: 16
  2337. KProcessHacker: ObQueryNameString: status 0x0
  2338. KProcessHacker: KphQueryNameObject:
  2339. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000af4, ObjectInformationLength: 512, returnLength: 16
  2340. KProcessHacker: ObQueryNameString: status 0x0
  2341. KProcessHacker: KphQueryNameObject:
  2342. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000af8, ObjectInformationLength: 512, returnLength: 16
  2343. KProcessHacker: ObQueryNameString: status 0x0
  2344. KProcessHacker: KphQueryNameObject:
  2345. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000afc, ObjectInformationLength: 512, returnLength: 16
  2346. KProcessHacker: ObQueryNameString: status 0x0
  2347. KProcessHacker: KphQueryNameObject:
  2348. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b00, ObjectInformationLength: 512, returnLength: 16
  2349. KProcessHacker: ObQueryNameString: status 0x0
  2350. KProcessHacker: KphQueryNameObject:
  2351. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b04, ObjectInformationLength: 512, returnLength: 16
  2352. KProcessHacker: ObQueryNameString: status 0x0
  2353. KProcessHacker: KphQueryNameObject:
  2354. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b08, ObjectInformationLength: 512, returnLength: 16
  2355. KProcessHacker: ObQueryNameString: status 0x0
  2356. KProcessHacker: KphQueryNameObject:
  2357. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b0c, ObjectInformationLength: 512, returnLength: 16
  2358. KProcessHacker: ObQueryNameString: status 0x0
  2359. KProcessHacker: KphQueryNameObject:
  2360. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b10, ObjectInformationLength: 512, returnLength: 16
  2361. KProcessHacker: ObQueryNameString: status 0x0
  2362. KProcessHacker: KphQueryNameObject:
  2363. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b14, ObjectInformationLength: 512, returnLength: 16
  2364. KProcessHacker: ObQueryNameString: status 0x0
  2365. KProcessHacker: KphQueryNameObject:
  2366. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b18, ObjectInformationLength: 512, returnLength: 16
  2367. KProcessHacker: ObQueryNameString: status 0x0
  2368. KProcessHacker: KphQueryNameObject:
  2369. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b1c, ObjectInformationLength: 512, returnLength: 16
  2370. KProcessHacker: ObQueryNameString: status 0x0
  2371. KProcessHacker: KphQueryNameObject:
  2372. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b20, ObjectInformationLength: 512, returnLength: 16
  2373. KProcessHacker: ObQueryNameString: status 0x0
  2374. KProcessHacker: KphQueryNameObject:
  2375. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b24, ObjectInformationLength: 512, returnLength: 16
  2376. KProcessHacker: ObQueryNameString: status 0x0
  2377. KProcessHacker: KphQueryNameObject:
  2378. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b28, ObjectInformationLength: 512, returnLength: 16
  2379. KProcessHacker: ObQueryNameString: status 0x0
  2380. KProcessHacker: KphQueryNameObject:
  2381. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b2c, ObjectInformationLength: 512, returnLength: 16
  2382. KProcessHacker: ObQueryNameString: status 0x0
  2383. KProcessHacker: KphQueryNameObject:
  2384. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b30, ObjectInformationLength: 512, returnLength: 16
  2385. KProcessHacker: ObQueryNameString: status 0x0
  2386. KProcessHacker: KphQueryNameObject:
  2387. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b34, ObjectInformationLength: 512, returnLength: 16
  2388. KProcessHacker: ObQueryNameString: status 0x0
  2389. KProcessHacker: KphQueryNameObject:
  2390. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b38, ObjectInformationLength: 512, returnLength: 16
  2391. KProcessHacker: ObQueryNameString: status 0x0
  2392. KProcessHacker: KphQueryNameObject:
  2393. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b3c, ObjectInformationLength: 512, returnLength: 16
  2394. KProcessHacker: ObQueryNameString: status 0x0
  2395. KProcessHacker: KphQueryNameObject:
  2396. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b40, ObjectInformationLength: 512, returnLength: 16
  2397. KProcessHacker: ObQueryNameString: status 0x0
  2398. KProcessHacker: KphQueryNameObject:
  2399. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b44, ObjectInformationLength: 512, returnLength: 16
  2400. KProcessHacker: ObQueryNameString: status 0x0
  2401. KProcessHacker: KphQueryNameObject:
  2402. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b48, ObjectInformationLength: 512, returnLength: 16
  2403. KProcessHacker: ObQueryNameString: status 0x0
  2404. KProcessHacker: KphQueryNameObject:
  2405. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b4c, ObjectInformationLength: 512, returnLength: 16
  2406. KProcessHacker: ObQueryNameString: status 0x0
  2407. KProcessHacker: KphQueryNameObject:
  2408. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b50, ObjectInformationLength: 512, returnLength: 16
  2409. KProcessHacker: ObQueryNameString: status 0x0
  2410. KProcessHacker: KphQueryNameObject:
  2411. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b54, ObjectInformationLength: 512, returnLength: 16
  2412. KProcessHacker: ObQueryNameString: status 0x0
  2413. KProcessHacker: KphQueryNameObject:
  2414. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b58, ObjectInformationLength: 512, returnLength: 16
  2415. KProcessHacker: ObQueryNameString: status 0x0
  2416. KProcessHacker: KphQueryNameObject:
  2417. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b5c, ObjectInformationLength: 512, returnLength: 16
  2418. KProcessHacker: ObQueryNameString: status 0x0
  2419. KProcessHacker: KphQueryNameObject:
  2420. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b60, ObjectInformationLength: 512, returnLength: 16
  2421. KProcessHacker: ObQueryNameString: status 0x0
  2422. KProcessHacker: KphQueryNameObject:
  2423. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b64, ObjectInformationLength: 512, returnLength: 16
  2424. KProcessHacker: ObQueryNameString: status 0x0
  2425. KProcessHacker: KphQueryNameObject: \BaseNamedObjects\[CoreMsgK]-{710ea10b-02c4-11e9-a4ae-000c29825323}
  2426. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b68, ObjectInformationLength: 512, returnLength: 152
  2427. KProcessHacker: ObQueryNameString: status 0x0
  2428. KProcessHacker: KphQueryNameObject:
  2429. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b6c, ObjectInformationLength: 512, returnLength: 16
  2430. KProcessHacker: ObQueryNameString: status 0x0
  2431. KProcessHacker: KphQueryNameObject:
  2432. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b70, ObjectInformationLength: 512, returnLength: 16
  2433. KProcessHacker: ObQueryNameString: status 0x0
  2434. KProcessHacker: KphQueryNameObject:
  2435. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b74, ObjectInformationLength: 512, returnLength: 16
  2436. KProcessHacker: ObQueryNameString: status 0x0
  2437. KProcessHacker: KphQueryNameObject:
  2438. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b78, ObjectInformationLength: 512, returnLength: 16
  2439. KProcessHacker: ObQueryNameString: status 0x0
  2440. KProcessHacker: KphQueryNameObject:
  2441. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b7c, ObjectInformationLength: 512, returnLength: 16
  2442. KProcessHacker: ObQueryNameString: status 0x0
  2443. KProcessHacker: KphQueryNameObject:
  2444. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b80, ObjectInformationLength: 512, returnLength: 16
  2445. KProcessHacker: ObQueryNameString: status 0x0
  2446. KProcessHacker: KphQueryNameObject:
  2447. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b84, ObjectInformationLength: 512, returnLength: 16
  2448. KProcessHacker: ObQueryNameString: status 0x0
  2449. KProcessHacker: KphQueryNameObject:
  2450. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b88, ObjectInformationLength: 512, returnLength: 16
  2451. KProcessHacker: ObQueryNameString: status 0x0
  2452. KProcessHacker: KphQueryNameObject:
  2453. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b8c, ObjectInformationLength: 512, returnLength: 16
  2454. KProcessHacker: ObQueryNameString: status 0x0
  2455. KProcessHacker: KphQueryNameObject:
  2456. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b90, ObjectInformationLength: 512, returnLength: 16
  2457. KProcessHacker: ObQueryNameString: status 0x0
  2458. KProcessHacker: KphQueryNameObject:
  2459. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b94, ObjectInformationLength: 512, returnLength: 16
  2460. KProcessHacker: ObQueryNameString: status 0x0
  2461. KProcessHacker: KphQueryNameObject:
  2462. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b98, ObjectInformationLength: 512, returnLength: 16
  2463. KProcessHacker: ObQueryNameString: status 0x0
  2464. KProcessHacker: KphQueryNameObject:
  2465. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000b9c, ObjectInformationLength: 512, returnLength: 16
  2466. KProcessHacker: ObQueryNameString: status 0x0
  2467. KProcessHacker: KphQueryNameObject:
  2468. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ba0, ObjectInformationLength: 512, returnLength: 16
  2469. KProcessHacker: ObQueryNameString: status 0x0
  2470. KProcessHacker: KphQueryNameObject:
  2471. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ba4, ObjectInformationLength: 512, returnLength: 16
  2472. KProcessHacker: ObQueryNameString: status 0x0
  2473. KProcessHacker: KphQueryNameObject:
  2474. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ba8, ObjectInformationLength: 512, returnLength: 16
  2475. KProcessHacker: ObQueryNameString: status 0x0
  2476. KProcessHacker: KphQueryNameObject: \Sessions\1\BaseNamedObjects\DwmComposedEvent_1
  2477. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bac, ObjectInformationLength: 512, returnLength: 112
  2478. KProcessHacker: ObQueryNameString: status 0x0
  2479. KProcessHacker: KphQueryNameObject:
  2480. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bb0, ObjectInformationLength: 512, returnLength: 16
  2481. KProcessHacker: ObQueryNameString: status 0x0
  2482. KProcessHacker: KphQueryNameObject:
  2483. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bb4, ObjectInformationLength: 512, returnLength: 16
  2484. KProcessHacker: ObQueryNameString: status 0x0
  2485. KProcessHacker: KphQueryNameObject:
  2486. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bb8, ObjectInformationLength: 512, returnLength: 16
  2487. KProcessHacker: ObQueryNameString: status 0x0
  2488. KProcessHacker: KphQueryNameObject:
  2489. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bbc, ObjectInformationLength: 512, returnLength: 16
  2490. KProcessHacker: ObQueryNameString: status 0x0
  2491. KProcessHacker: KphQueryNameObject:
  2492. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bc0, ObjectInformationLength: 512, returnLength: 16
  2493. KProcessHacker: ObQueryNameString: status 0x0
  2494. KProcessHacker: KphQueryNameObject:
  2495. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bc4, ObjectInformationLength: 512, returnLength: 16
  2496. KProcessHacker: ObQueryNameString: status 0x0
  2497. KProcessHacker: KphQueryNameObject:
  2498. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bc8, ObjectInformationLength: 512, returnLength: 16
  2499. KProcessHacker: ObQueryNameString: status 0x0
  2500. KProcessHacker: KphQueryNameObject:
  2501. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bcc, ObjectInformationLength: 512, returnLength: 16
  2502. KProcessHacker: ObQueryNameString: status 0x0
  2503. KProcessHacker: KphQueryNameObject:
  2504. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bd0, ObjectInformationLength: 512, returnLength: 16
  2505. KProcessHacker: ObQueryNameString: status 0x0
  2506. KProcessHacker: KphQueryNameObject:
  2507. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bd4, ObjectInformationLength: 512, returnLength: 16
  2508. KProcessHacker: ObQueryNameString: status 0x0
  2509. KProcessHacker: KphQueryNameObject:
  2510. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bd8, ObjectInformationLength: 512, returnLength: 16
  2511. KProcessHacker: ObQueryNameString: status 0x0
  2512. KProcessHacker: KphQueryNameObject:
  2513. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bdc, ObjectInformationLength: 512, returnLength: 16
  2514. KProcessHacker: ObQueryNameString: status 0x0
  2515. KProcessHacker: KphQueryNameObject:
  2516. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000be0, ObjectInformationLength: 512, returnLength: 16
  2517. KProcessHacker: ObQueryNameString: status 0x0
  2518. KProcessHacker: KphQueryNameObject:
  2519. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000be4, ObjectInformationLength: 512, returnLength: 16
  2520. KProcessHacker: ObQueryNameString: status 0x0
  2521. KProcessHacker: KphQueryNameObject:
  2522. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000be8, ObjectInformationLength: 512, returnLength: 16
  2523. KProcessHacker: ObQueryNameString: status 0x0
  2524. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2525. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bec, ObjectInformationLength: 512, returnLength: 40
  2526. KProcessHacker: ObQueryNameString: status 0x0
  2527. KProcessHacker: KphQueryNameObject:
  2528. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bf0, ObjectInformationLength: 512, returnLength: 16
  2529. KProcessHacker: ObQueryNameString: status 0x0
  2530. KProcessHacker: KphQueryNameObject:
  2531. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bf4, ObjectInformationLength: 512, returnLength: 16
  2532. KProcessHacker: ObQueryNameString: status 0x0
  2533. KProcessHacker: KphQueryNameObject:
  2534. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bf8, ObjectInformationLength: 512, returnLength: 16
  2535. KProcessHacker: ObQueryNameString: status 0x0
  2536. KProcessHacker: KphQueryNameObject:
  2537. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000bfc, ObjectInformationLength: 512, returnLength: 16
  2538. KProcessHacker: ObQueryNameString: status 0x0
  2539. KProcessHacker: KphQueryNameObject:
  2540. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c04, ObjectInformationLength: 512, returnLength: 16
  2541. KProcessHacker: ObQueryNameString: status 0x0
  2542. KProcessHacker: KphQueryNameObject:
  2543. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c08, ObjectInformationLength: 512, returnLength: 16
  2544. KProcessHacker: ObQueryNameString: status 0x0
  2545. KProcessHacker: KphQueryNameObject:
  2546. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c0c, ObjectInformationLength: 512, returnLength: 16
  2547. KProcessHacker: ObQueryNameString: status 0x0
  2548. KProcessHacker: KphQueryNameObject:
  2549. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c10, ObjectInformationLength: 512, returnLength: 16
  2550. KProcessHacker: ObQueryNameString: status 0x0
  2551. KProcessHacker: KphQueryNameObject:
  2552. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c14, ObjectInformationLength: 512, returnLength: 16
  2553. KProcessHacker: ObQueryNameString: status 0x0
  2554. KProcessHacker: KphQueryNameObject:
  2555. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c18, ObjectInformationLength: 512, returnLength: 16
  2556. KProcessHacker: ObQueryNameString: status 0x0
  2557. KProcessHacker: KphQueryNameObject:
  2558. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c1c, ObjectInformationLength: 512, returnLength: 16
  2559. KProcessHacker: ObQueryNameString: status 0x0
  2560. KProcessHacker: KphQueryNameObject:
  2561. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c20, ObjectInformationLength: 512, returnLength: 16
  2562. KProcessHacker: ObQueryNameString: status 0x0
  2563. KProcessHacker: KphQueryNameObject:
  2564. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c24, ObjectInformationLength: 512, returnLength: 16
  2565. KProcessHacker: ObQueryNameString: status 0x0
  2566. KProcessHacker: KphQueryNameObject:
  2567. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c28, ObjectInformationLength: 512, returnLength: 16
  2568. KProcessHacker: ObQueryNameString: status 0x0
  2569. KProcessHacker: KphQueryNameObject:
  2570. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c2c, ObjectInformationLength: 512, returnLength: 16
  2571. KProcessHacker: ObQueryNameString: status 0x0
  2572. KProcessHacker: KphQueryNameObject:
  2573. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c30, ObjectInformationLength: 512, returnLength: 16
  2574. KProcessHacker: ObQueryNameString: status 0x0
  2575. KProcessHacker: KphQueryNameObject:
  2576. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c34, ObjectInformationLength: 512, returnLength: 16
  2577. KProcessHacker: ObQueryNameString: status 0x0
  2578. KProcessHacker: KphQueryNameObject:
  2579. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c38, ObjectInformationLength: 512, returnLength: 16
  2580. KProcessHacker: ObQueryNameString: status 0x0
  2581. KProcessHacker: KphQueryNameObject:
  2582. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c3c, ObjectInformationLength: 512, returnLength: 16
  2583. KProcessHacker: ObQueryNameString: status 0x0
  2584. KProcessHacker: KphQueryNameObject:
  2585. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c40, ObjectInformationLength: 512, returnLength: 16
  2586. KProcessHacker: ObQueryNameString: status 0x0
  2587. KProcessHacker: KphQueryNameObject:
  2588. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c44, ObjectInformationLength: 512, returnLength: 16
  2589. KProcessHacker: ObQueryNameString: status 0x0
  2590. KProcessHacker: KphQueryNameObject:
  2591. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c48, ObjectInformationLength: 512, returnLength: 16
  2592. KProcessHacker: ObQueryNameString: status 0x0
  2593. KProcessHacker: KphQueryNameObject:
  2594. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c4c, ObjectInformationLength: 512, returnLength: 16
  2595. KProcessHacker: ObQueryNameString: status 0x0
  2596. KProcessHacker: KphQueryNameObject:
  2597. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c50, ObjectInformationLength: 512, returnLength: 16
  2598. KProcessHacker: ObQueryNameString: status 0x0
  2599. KProcessHacker: KphQueryNameObject:
  2600. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c54, ObjectInformationLength: 512, returnLength: 16
  2601. KProcessHacker: ObQueryNameString: status 0x0
  2602. KProcessHacker: KphQueryNameObject:
  2603. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c58, ObjectInformationLength: 512, returnLength: 16
  2604. KProcessHacker: ObQueryNameString: status 0x0
  2605. KProcessHacker: KphQueryNameObject:
  2606. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c5c, ObjectInformationLength: 512, returnLength: 16
  2607. KProcessHacker: ObQueryNameString: status 0x0
  2608. KProcessHacker: KphQueryNameObject:
  2609. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c60, ObjectInformationLength: 512, returnLength: 16
  2610. KProcessHacker: ObQueryNameString: status 0x0
  2611. KProcessHacker: KphQueryNameObject:
  2612. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c64, ObjectInformationLength: 512, returnLength: 16
  2613. KProcessHacker: ObQueryNameString: status 0x0
  2614. KProcessHacker: KphQueryNameObject:
  2615. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c68, ObjectInformationLength: 512, returnLength: 16
  2616. KProcessHacker: ObQueryNameString: status 0x0
  2617. KProcessHacker: KphQueryNameObject:
  2618. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c6c, ObjectInformationLength: 512, returnLength: 16
  2619. KProcessHacker: ObQueryNameString: status 0x0
  2620. KProcessHacker: KphQueryNameObject:
  2621. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c70, ObjectInformationLength: 512, returnLength: 16
  2622. KProcessHacker: ObQueryNameString: status 0x0
  2623. KProcessHacker: KphQueryNameObject:
  2624. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c74, ObjectInformationLength: 512, returnLength: 16
  2625. KProcessHacker: ObQueryNameString: status 0x0
  2626. KProcessHacker: KphQueryNameObject:
  2627. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c78, ObjectInformationLength: 512, returnLength: 16
  2628. KProcessHacker: ObQueryNameString: status 0x0
  2629. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  2630. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c7c, ObjectInformationLength: 512, returnLength: 64
  2631. KProcessHacker: ObQueryNameString: status 0x0
  2632. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  2633. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c80, ObjectInformationLength: 512, returnLength: 64
  2634. KProcessHacker: ObQueryNameString: status 0x0
  2635. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  2636. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c84, ObjectInformationLength: 512, returnLength: 64
  2637. KProcessHacker: ObQueryNameString: status 0x0
  2638. KProcessHacker: KphQueryNameObject: \KernelObjects\Session1
  2639. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c88, ObjectInformationLength: 512, returnLength: 64
  2640. KProcessHacker: ObQueryNameString: status 0x0
  2641. KProcessHacker: KphQueryNameObject:
  2642. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c8c, ObjectInformationLength: 512, returnLength: 16
  2643. KProcessHacker: ObQueryNameString: status 0x0
  2644. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl
  2645. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c90, ObjectInformationLength: 512, returnLength: 202
  2646. KProcessHacker: ObQueryNameString: status 0x0
  2647. KProcessHacker: KphQueryNameObject:
  2648. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c94, ObjectInformationLength: 512, returnLength: 16
  2649. KProcessHacker: ObQueryNameString: status 0x0
  2650. KProcessHacker: KphQueryNameObject:
  2651. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c98, ObjectInformationLength: 512, returnLength: 16
  2652. KProcessHacker: ObQueryNameString: status 0x0
  2653. KProcessHacker: KphQueryNameObject:
  2654. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000c9c, ObjectInformationLength: 512, returnLength: 16
  2655. KProcessHacker: ObQueryNameString: status 0x0
  2656. KProcessHacker: KphQueryNameObject:
  2657. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ca0, ObjectInformationLength: 512, returnLength: 16
  2658. KProcessHacker: ObQueryNameString: status 0x0
  2659. KProcessHacker: KphQueryNameObject:
  2660. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ca4, ObjectInformationLength: 512, returnLength: 16
  2661. KProcessHacker: ObQueryNameString: status 0x0
  2662. KProcessHacker: KphQueryNameObject:
  2663. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ca8, ObjectInformationLength: 512, returnLength: 16
  2664. KProcessHacker: ObQueryNameString: status 0x0
  2665. KProcessHacker: KphQueryNameObject:
  2666. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cac, ObjectInformationLength: 512, returnLength: 16
  2667. KProcessHacker: ObQueryNameString: status 0x0
  2668. KProcessHacker: KphQueryNameObject:
  2669. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cb0, ObjectInformationLength: 512, returnLength: 16
  2670. KProcessHacker: ObQueryNameString: status 0x0
  2671. KProcessHacker: KphQueryNameObject:
  2672. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cb4, ObjectInformationLength: 512, returnLength: 16
  2673. KProcessHacker: ObQueryNameString: status 0x0
  2674. KProcessHacker: KphQueryNameObject:
  2675. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cb8, ObjectInformationLength: 512, returnLength: 16
  2676. KProcessHacker: ObQueryNameString: status 0x0
  2677. KProcessHacker: KphQueryNameObject:
  2678. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cbc, ObjectInformationLength: 512, returnLength: 16
  2679. KProcessHacker: ObQueryNameString: status 0x0
  2680. KProcessHacker: KphQueryNameObject:
  2681. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cc0, ObjectInformationLength: 512, returnLength: 16
  2682. KProcessHacker: ObQueryNameString: status 0x0
  2683. KProcessHacker: KphQueryNameObject:
  2684. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cc4, ObjectInformationLength: 512, returnLength: 16
  2685. KProcessHacker: ObQueryNameString: status 0x0
  2686. KProcessHacker: KphQueryNameObject:
  2687. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cc8, ObjectInformationLength: 512, returnLength: 16
  2688. KProcessHacker: ObQueryNameString: status 0x0
  2689. KProcessHacker: KphQueryNameObject:
  2690. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ccc, ObjectInformationLength: 512, returnLength: 16
  2691. KProcessHacker: ObQueryNameString: status 0x0
  2692. KProcessHacker: KphQueryNameObject:
  2693. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cd0, ObjectInformationLength: 512, returnLength: 16
  2694. KProcessHacker: ObQueryNameString: status 0x0
  2695. KProcessHacker: KphQueryNameObject:
  2696. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cd4, ObjectInformationLength: 512, returnLength: 16
  2697. KProcessHacker: ObQueryNameString: status 0x0
  2698. KProcessHacker: KphQueryNameObject:
  2699. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cd8, ObjectInformationLength: 512, returnLength: 16
  2700. KProcessHacker: ObQueryNameString: status 0x0
  2701. KProcessHacker: KphQueryNameObject:
  2702. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cdc, ObjectInformationLength: 512, returnLength: 16
  2703. KProcessHacker: ObQueryNameString: status 0x0
  2704. KProcessHacker: KphQueryNameObject:
  2705. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ce0, ObjectInformationLength: 512, returnLength: 16
  2706. KProcessHacker: ObQueryNameString: status 0x0
  2707. KProcessHacker: KphQueryNameObject:
  2708. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ce4, ObjectInformationLength: 512, returnLength: 16
  2709. KProcessHacker: ObQueryNameString: status 0x0
  2710. KProcessHacker: KphQueryNameObject:
  2711. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ce8, ObjectInformationLength: 512, returnLength: 16
  2712. KProcessHacker: ObQueryNameString: status 0x0
  2713. KProcessHacker: KphQueryNameObject:
  2714. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cec, ObjectInformationLength: 512, returnLength: 16
  2715. KProcessHacker: ObQueryNameString: status 0x0
  2716. KProcessHacker: KphQueryNameObject: \storqosfltport
  2717. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cf0, ObjectInformationLength: 512, returnLength: 48
  2718. KProcessHacker: ObQueryNameString: status 0x0
  2719. KProcessHacker: KphQueryNameObject:
  2720. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cf4, ObjectInformationLength: 512, returnLength: 16
  2721. KProcessHacker: ObQueryNameString: status 0x0
  2722. KProcessHacker: KphQueryNameObject:
  2723. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cf8, ObjectInformationLength: 512, returnLength: 16
  2724. KProcessHacker: ObQueryNameString: status 0x0
  2725. KProcessHacker: KphQueryNameObject:
  2726. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000cfc, ObjectInformationLength: 512, returnLength: 16
  2727. KProcessHacker: ObQueryNameString: status 0x0
  2728. KProcessHacker: KphQueryNameObject:
  2729. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d00, ObjectInformationLength: 512, returnLength: 16
  2730. KProcessHacker: ObQueryNameString: status 0x0
  2731. KProcessHacker: KphQueryNameObject:
  2732. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d04, ObjectInformationLength: 512, returnLength: 16
  2733. KProcessHacker: ObQueryNameString: status 0x0
  2734. KProcessHacker: KphQueryNameObject:
  2735. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d08, ObjectInformationLength: 512, returnLength: 16
  2736. KProcessHacker: ObQueryNameString: status 0x0
  2737. KProcessHacker: KphQueryNameObject:
  2738. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d0c, ObjectInformationLength: 512, returnLength: 16
  2739. KProcessHacker: ObQueryNameString: status 0x0
  2740. KProcessHacker: KphQueryNameObject:
  2741. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d10, ObjectInformationLength: 512, returnLength: 16
  2742. KProcessHacker: ObQueryNameString: status 0x0
  2743. KProcessHacker: KphQueryNameObject:
  2744. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d14, ObjectInformationLength: 512, returnLength: 16
  2745. KProcessHacker: ObQueryNameString: status 0x0
  2746. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4
  2747. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d18, ObjectInformationLength: 512, returnLength: 64
  2748. KProcessHacker: ObQueryNameString: status 0x0
  2749. KProcessHacker: KphQueryNameObject:
  2750. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d1c, ObjectInformationLength: 512, returnLength: 16
  2751. KProcessHacker: ObQueryNameString: status 0x0
  2752. KProcessHacker: KphQueryNameObject:
  2753. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d20, ObjectInformationLength: 512, returnLength: 16
  2754. KProcessHacker: ObQueryNameString: status 0x0
  2755. KProcessHacker: KphQueryNameObject:
  2756. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d24, ObjectInformationLength: 512, returnLength: 16
  2757. KProcessHacker: ObQueryNameString: status 0x0
  2758. KProcessHacker: KphQueryNameObject:
  2759. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d28, ObjectInformationLength: 512, returnLength: 16
  2760. KProcessHacker: ObQueryNameString: status 0x0
  2761. KProcessHacker: KphQueryNameObject:
  2762. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d2c, ObjectInformationLength: 512, returnLength: 16
  2763. KProcessHacker: ObQueryNameString: status 0x0
  2764. KProcessHacker: KphQueryNameObject:
  2765. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d30, ObjectInformationLength: 512, returnLength: 16
  2766. KProcessHacker: ObQueryNameString: status 0x0
  2767. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wcifs\Instances\wcifs Instance
  2768. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d34, ObjectInformationLength: 512, returnLength: 174
  2769. KProcessHacker: ObQueryNameString: status 0x0
  2770. KProcessHacker: KphQueryNameObject: \WcifsPort
  2771. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d38, ObjectInformationLength: 512, returnLength: 38
  2772. KProcessHacker: ObQueryNameString: status 0x0
  2773. KProcessHacker: KphQueryNameObject:
  2774. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d3c, ObjectInformationLength: 512, returnLength: 16
  2775. KProcessHacker: ObQueryNameString: status 0x0
  2776. KProcessHacker: KphQueryNameObject:
  2777. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d40, ObjectInformationLength: 512, returnLength: 16
  2778. KProcessHacker: ObQueryNameString: status 0x0
  2779. KProcessHacker: KphQueryNameObject:
  2780. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d44, ObjectInformationLength: 512, returnLength: 16
  2781. KProcessHacker: ObQueryNameString: status 0x0
  2782. KProcessHacker: KphQueryNameObject:
  2783. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d48, ObjectInformationLength: 512, returnLength: 16
  2784. KProcessHacker: ObQueryNameString: status 0x0
  2785. KProcessHacker: KphQueryNameObject:
  2786. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d4c, ObjectInformationLength: 512, returnLength: 16
  2787. KProcessHacker: ObQueryNameString: status 0x0
  2788. KProcessHacker: KphQueryNameObject:
  2789. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d50, ObjectInformationLength: 512, returnLength: 16
  2790. KProcessHacker: ObQueryNameString: status 0x0
  2791. KProcessHacker: KphQueryNameObject:
  2792. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d54, ObjectInformationLength: 512, returnLength: 16
  2793. KProcessHacker: ObQueryNameString: status 0x0
  2794. KProcessHacker: KphQueryNameObject:
  2795. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d58, ObjectInformationLength: 512, returnLength: 16
  2796. KProcessHacker: ObQueryNameString: status 0x0
  2797. KProcessHacker: KphQueryNameObject: \Device\Udp
  2798. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d5c, ObjectInformationLength: 512, returnLength: 40
  2799. KProcessHacker: ObQueryNameString: status 0x0
  2800. KProcessHacker: KphQueryNameObject:
  2801. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d60, ObjectInformationLength: 512, returnLength: 16
  2802. KProcessHacker: ObQueryNameString: status 0x0
  2803. KProcessHacker: KphQueryNameObject: \Device\Udp
  2804. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d64, ObjectInformationLength: 512, returnLength: 40
  2805. KProcessHacker: ObQueryNameString: status 0x0
  2806. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2807. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d68, ObjectInformationLength: 512, returnLength: 40
  2808. KProcessHacker: ObQueryNameString: status 0x0
  2809. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2810. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d6c, ObjectInformationLength: 512, returnLength: 40
  2811. KProcessHacker: ObQueryNameString: status 0x0
  2812. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2813. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d70, ObjectInformationLength: 512, returnLength: 40
  2814. KProcessHacker: ObQueryNameString: status 0x0
  2815. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2816. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d74, ObjectInformationLength: 512, returnLength: 40
  2817. KProcessHacker: ObQueryNameString: status 0x0
  2818. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2819. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d78, ObjectInformationLength: 512, returnLength: 40
  2820. KProcessHacker: ObQueryNameString: status 0x0
  2821. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2822. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d7c, ObjectInformationLength: 512, returnLength: 40
  2823. KProcessHacker: ObQueryNameString: status 0x0
  2824. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2825. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d80, ObjectInformationLength: 512, returnLength: 40
  2826. KProcessHacker: ObQueryNameString: status 0x0
  2827. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2828. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d84, ObjectInformationLength: 512, returnLength: 40
  2829. KProcessHacker: ObQueryNameString: status 0x0
  2830. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2831. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d88, ObjectInformationLength: 512, returnLength: 40
  2832. KProcessHacker: ObQueryNameString: status 0x0
  2833. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2834. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d8c, ObjectInformationLength: 512, returnLength: 40
  2835. KProcessHacker: ObQueryNameString: status 0x0
  2836. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2837. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d90, ObjectInformationLength: 512, returnLength: 40
  2838. KProcessHacker: ObQueryNameString: status 0x0
  2839. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2840. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d94, ObjectInformationLength: 512, returnLength: 40
  2841. KProcessHacker: ObQueryNameString: status 0x0
  2842. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2843. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d98, ObjectInformationLength: 512, returnLength: 40
  2844. KProcessHacker: ObQueryNameString: status 0x0
  2845. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2846. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000d9c, ObjectInformationLength: 512, returnLength: 40
  2847. KProcessHacker: ObQueryNameString: status 0x0
  2848. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2849. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000da0, ObjectInformationLength: 512, returnLength: 40
  2850. KProcessHacker: ObQueryNameString: status 0x0
  2851. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2852. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000da4, ObjectInformationLength: 512, returnLength: 40
  2853. KProcessHacker: ObQueryNameString: status 0x0
  2854. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2855. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000da8, ObjectInformationLength: 512, returnLength: 40
  2856. KProcessHacker: ObQueryNameString: status 0x0
  2857. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2858. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dac, ObjectInformationLength: 512, returnLength: 40
  2859. KProcessHacker: ObQueryNameString: status 0x0
  2860. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2861. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000db0, ObjectInformationLength: 512, returnLength: 40
  2862. KProcessHacker: ObQueryNameString: status 0x0
  2863. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2864. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000db4, ObjectInformationLength: 512, returnLength: 40
  2865. KProcessHacker: ObQueryNameString: status 0x0
  2866. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2867. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000db8, ObjectInformationLength: 512, returnLength: 40
  2868. KProcessHacker: ObQueryNameString: status 0x0
  2869. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2870. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dbc, ObjectInformationLength: 512, returnLength: 40
  2871. KProcessHacker: ObQueryNameString: status 0x0
  2872. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2873. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dc0, ObjectInformationLength: 512, returnLength: 40
  2874. KProcessHacker: ObQueryNameString: status 0x0
  2875. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2876. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dc4, ObjectInformationLength: 512, returnLength: 40
  2877. KProcessHacker: ObQueryNameString: status 0x0
  2878. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2879. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dc8, ObjectInformationLength: 512, returnLength: 40
  2880. KProcessHacker: ObQueryNameString: status 0x0
  2881. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2882. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dcc, ObjectInformationLength: 512, returnLength: 40
  2883. KProcessHacker: ObQueryNameString: status 0x0
  2884. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2885. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dd0, ObjectInformationLength: 512, returnLength: 40
  2886. KProcessHacker: ObQueryNameString: status 0x0
  2887. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2888. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dd4, ObjectInformationLength: 512, returnLength: 40
  2889. KProcessHacker: ObQueryNameString: status 0x0
  2890. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2891. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dd8, ObjectInformationLength: 512, returnLength: 40
  2892. KProcessHacker: ObQueryNameString: status 0x0
  2893. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2894. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ddc, ObjectInformationLength: 512, returnLength: 40
  2895. KProcessHacker: ObQueryNameString: status 0x0
  2896. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2897. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000de0, ObjectInformationLength: 512, returnLength: 40
  2898. KProcessHacker: ObQueryNameString: status 0x0
  2899. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2900. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000de4, ObjectInformationLength: 512, returnLength: 40
  2901. KProcessHacker: ObQueryNameString: status 0x0
  2902. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2903. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000de8, ObjectInformationLength: 512, returnLength: 40
  2904. KProcessHacker: ObQueryNameString: status 0x0
  2905. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2906. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dec, ObjectInformationLength: 512, returnLength: 40
  2907. KProcessHacker: ObQueryNameString: status 0x0
  2908. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2909. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000df0, ObjectInformationLength: 512, returnLength: 40
  2910. KProcessHacker: ObQueryNameString: status 0x0
  2911. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2912. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000df4, ObjectInformationLength: 512, returnLength: 40
  2913. KProcessHacker: ObQueryNameString: status 0x0
  2914. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2915. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000df8, ObjectInformationLength: 512, returnLength: 40
  2916. KProcessHacker: ObQueryNameString: status 0x0
  2917. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2918. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000dfc, ObjectInformationLength: 512, returnLength: 40
  2919. KProcessHacker: ObQueryNameString: status 0x0
  2920. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2921. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e00, ObjectInformationLength: 512, returnLength: 40
  2922. KProcessHacker: ObQueryNameString: status 0x0
  2923. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2924. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e04, ObjectInformationLength: 512, returnLength: 40
  2925. KProcessHacker: ObQueryNameString: status 0x0
  2926. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2927. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e08, ObjectInformationLength: 512, returnLength: 40
  2928. KProcessHacker: ObQueryNameString: status 0x0
  2929. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2930. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e0c, ObjectInformationLength: 512, returnLength: 40
  2931. KProcessHacker: ObQueryNameString: status 0x0
  2932. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2933. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e10, ObjectInformationLength: 512, returnLength: 40
  2934. KProcessHacker: ObQueryNameString: status 0x0
  2935. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2936. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e14, ObjectInformationLength: 512, returnLength: 40
  2937. KProcessHacker: ObQueryNameString: status 0x0
  2938. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2939. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e18, ObjectInformationLength: 512, returnLength: 40
  2940. KProcessHacker: ObQueryNameString: status 0x0
  2941. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2942. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e1c, ObjectInformationLength: 512, returnLength: 40
  2943. KProcessHacker: ObQueryNameString: status 0x0
  2944. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2945. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e20, ObjectInformationLength: 512, returnLength: 40
  2946. KProcessHacker: ObQueryNameString: status 0x0
  2947. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2948. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e24, ObjectInformationLength: 512, returnLength: 40
  2949. KProcessHacker: ObQueryNameString: status 0x0
  2950. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2951. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e28, ObjectInformationLength: 512, returnLength: 40
  2952. KProcessHacker: ObQueryNameString: status 0x0
  2953. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2954. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e2c, ObjectInformationLength: 512, returnLength: 40
  2955. KProcessHacker: ObQueryNameString: status 0x0
  2956. KProcessHacker: KphQueryNameObject: \Device\Tcp
  2957. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e30, ObjectInformationLength: 512, returnLength: 40
  2958. KProcessHacker: ObQueryNameString: status 0x0
  2959. KProcessHacker: KphQueryNameObject:
  2960. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e34, ObjectInformationLength: 512, returnLength: 16
  2961. KProcessHacker: ObQueryNameString: status 0x0
  2962. KProcessHacker: KphQueryNameObject:
  2963. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e38, ObjectInformationLength: 512, returnLength: 16
  2964. KProcessHacker: ObQueryNameString: status 0x0
  2965. KProcessHacker: KphQueryNameObject:
  2966. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e3c, ObjectInformationLength: 512, returnLength: 16
  2967. KProcessHacker: ObQueryNameString: status 0x0
  2968. KProcessHacker: KphQueryNameObject:
  2969. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e40, ObjectInformationLength: 512, returnLength: 16
  2970. KProcessHacker: ObQueryNameString: status 0x0
  2971. KProcessHacker: KphQueryNameObject:
  2972. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e44, ObjectInformationLength: 512, returnLength: 16
  2973. KProcessHacker: ObQueryNameString: status 0x0
  2974. KProcessHacker: KphQueryNameObject:
  2975. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e48, ObjectInformationLength: 512, returnLength: 16
  2976. KProcessHacker: ObQueryNameString: status 0x0
  2977. KProcessHacker: KphQueryNameObject:
  2978. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e4c, ObjectInformationLength: 512, returnLength: 16
  2979. KProcessHacker: ObQueryNameString: status 0x0
  2980. KProcessHacker: KphQueryNameObject:
  2981. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e50, ObjectInformationLength: 512, returnLength: 16
  2982. KProcessHacker: ObQueryNameString: status 0x0
  2983. KProcessHacker: KphQueryNameObject:
  2984. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e54, ObjectInformationLength: 512, returnLength: 16
  2985. KProcessHacker: ObQueryNameString: status 0x0
  2986. KProcessHacker: KphQueryNameObject:
  2987. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e58, ObjectInformationLength: 512, returnLength: 16
  2988. KProcessHacker: ObQueryNameString: status 0x0
  2989. KProcessHacker: KphQueryNameObject: \CLDMSGPORT
  2990. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e5c, ObjectInformationLength: 512, returnLength: 40
  2991. KProcessHacker: ObQueryNameString: status 0x0
  2992. KProcessHacker: KphQueryNameObject:
  2993. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e60, ObjectInformationLength: 512, returnLength: 16
  2994. KProcessHacker: ObQueryNameString: status 0x0
  2995. KProcessHacker: KphQueryNameObject:
  2996. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e64, ObjectInformationLength: 512, returnLength: 16
  2997. KProcessHacker: ObQueryNameString: status 0x0
  2998. KProcessHacker: KphQueryNameObject:
  2999. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e68, ObjectInformationLength: 512, returnLength: 16
  3000. KProcessHacker: ObQueryNameString: status 0x0
  3001. KProcessHacker: KphQueryNameObject:
  3002. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e6c, ObjectInformationLength: 512, returnLength: 16
  3003. KProcessHacker: ObQueryNameString: status 0x0
  3004. KProcessHacker: KphQueryNameObject:
  3005. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e70, ObjectInformationLength: 512, returnLength: 16
  3006. KProcessHacker: ObQueryNameString: status 0x0
  3007. KProcessHacker: KphQueryNameObject:
  3008. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e74, ObjectInformationLength: 512, returnLength: 16
  3009. KProcessHacker: ObQueryNameString: status 0x0
  3010. KProcessHacker: KphQueryNameObject:
  3011. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e78, ObjectInformationLength: 512, returnLength: 16
  3012. KProcessHacker: ObQueryNameString: status 0x0
  3013. KProcessHacker: KphQueryNameObject:
  3014. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e7c, ObjectInformationLength: 512, returnLength: 16
  3015. KProcessHacker: ObQueryNameString: status 0x0
  3016. KProcessHacker: KphQueryNameObject:
  3017. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e80, ObjectInformationLength: 512, returnLength: 16
  3018. KProcessHacker: ObQueryNameString: status 0x0
  3019. KProcessHacker: KphQueryNameObject:
  3020. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e84, ObjectInformationLength: 512, returnLength: 16
  3021. KProcessHacker: ObQueryNameString: status 0x0
  3022. KProcessHacker: KphQueryNameObject:
  3023. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e88, ObjectInformationLength: 512, returnLength: 16
  3024. KProcessHacker: ObQueryNameString: status 0x0
  3025. KProcessHacker: KphQueryNameObject:
  3026. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e8c, ObjectInformationLength: 512, returnLength: 16
  3027. KProcessHacker: ObQueryNameString: status 0x0
  3028. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\Windows\System32\UserMgrLog.etl
  3029. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e90, ObjectInformationLength: 512, returnLength: 128
  3030. KProcessHacker: ObQueryNameString: status 0x0
  3031. KProcessHacker: KphQueryNameObject:
  3032. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e94, ObjectInformationLength: 512, returnLength: 16
  3033. KProcessHacker: ObQueryNameString: status 0x0
  3034. KProcessHacker: KphQueryNameObject:
  3035. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e98, ObjectInformationLength: 512, returnLength: 16
  3036. KProcessHacker: ObQueryNameString: status 0x0
  3037. KProcessHacker: KphQueryNameObject:
  3038. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000e9c, ObjectInformationLength: 512, returnLength: 16
  3039. KProcessHacker: ObQueryNameString: status 0x0
  3040. KProcessHacker: KphQueryNameObject:
  3041. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ea0, ObjectInformationLength: 512, returnLength: 16
  3042. KProcessHacker: ObQueryNameString: status 0x0
  3043. KProcessHacker: KphQueryNameObject:
  3044. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ea4, ObjectInformationLength: 512, returnLength: 16
  3045. KProcessHacker: ObQueryNameString: status 0x0
  3046. KProcessHacker: KphQueryNameObject:
  3047. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ea8, ObjectInformationLength: 512, returnLength: 16
  3048. KProcessHacker: ObQueryNameString: status 0x0
  3049. KProcessHacker: KphQueryNameObject:
  3050. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000eac, ObjectInformationLength: 512, returnLength: 16
  3051. KProcessHacker: ObQueryNameString: status 0x0
  3052. KProcessHacker: KphQueryNameObject:
  3053. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000eb0, ObjectInformationLength: 512, returnLength: 16
  3054. KProcessHacker: ObQueryNameString: status 0x0
  3055. KProcessHacker: KphQueryNameObject:
  3056. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000eb4, ObjectInformationLength: 512, returnLength: 16
  3057. KProcessHacker: ObQueryNameString: status 0x0
  3058. KProcessHacker: KphQueryNameObject:
  3059. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000eb8, ObjectInformationLength: 512, returnLength: 16
  3060. KProcessHacker: ObQueryNameString: status 0x0
  3061. KProcessHacker: KphQueryNameObject:
  3062. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ebc, ObjectInformationLength: 512, returnLength: 16
  3063. KProcessHacker: ObQueryNameString: status 0x0
  3064. KProcessHacker: KphQueryNameObject:
  3065. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ec0, ObjectInformationLength: 512, returnLength: 16
  3066. KProcessHacker: ObQueryNameString: status 0x0
  3067. KProcessHacker: KphQueryNameObject:
  3068. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ec4, ObjectInformationLength: 512, returnLength: 16
  3069. KProcessHacker: ObQueryNameString: status 0x0
  3070. KProcessHacker: KphQueryNameObject:
  3071. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ec8, ObjectInformationLength: 512, returnLength: 16
  3072. KProcessHacker: ObQueryNameString: status 0x0
  3073. KProcessHacker: KphQueryNameObject:
  3074. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ecc, ObjectInformationLength: 512, returnLength: 16
  3075. KProcessHacker: ObQueryNameString: status 0x0
  3076. KProcessHacker: KphQueryNameObject:
  3077. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ed0, ObjectInformationLength: 512, returnLength: 16
  3078. KProcessHacker: ObQueryNameString: status 0x0
  3079. KProcessHacker: KphQueryNameObject:
  3080. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ed4, ObjectInformationLength: 512, returnLength: 16
  3081. KProcessHacker: ObQueryNameString: status 0x0
  3082. KProcessHacker: KphQueryNameObject:
  3083. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ed8, ObjectInformationLength: 512, returnLength: 16
  3084. KProcessHacker: ObQueryNameString: status 0x0
  3085. KProcessHacker: KphQueryNameObject:
  3086. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000edc, ObjectInformationLength: 512, returnLength: 16
  3087. KProcessHacker: ObQueryNameString: status 0x0
  3088. KProcessHacker: KphQueryNameObject:
  3089. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ee0, ObjectInformationLength: 512, returnLength: 16
  3090. KProcessHacker: ObQueryNameString: status 0x0
  3091. KProcessHacker: KphQueryNameObject:
  3092. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ee4, ObjectInformationLength: 512, returnLength: 16
  3093. KProcessHacker: ObQueryNameString: status 0x0
  3094. KProcessHacker: KphQueryNameObject:
  3095. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ee8, ObjectInformationLength: 512, returnLength: 16
  3096. KProcessHacker: ObQueryNameString: status 0x0
  3097. KProcessHacker: KphQueryNameObject:
  3098. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000eec, ObjectInformationLength: 512, returnLength: 16
  3099. KProcessHacker: ObQueryNameString: status 0x0
  3100. KProcessHacker: KphQueryNameObject:
  3101. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ef0, ObjectInformationLength: 512, returnLength: 16
  3102. KProcessHacker: ObQueryNameString: status 0x0
  3103. KProcessHacker: KphQueryNameObject:
  3104. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ef4, ObjectInformationLength: 512, returnLength: 16
  3105. KProcessHacker: ObQueryNameString: status 0x0
  3106. KProcessHacker: KphQueryNameObject:
  3107. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ef8, ObjectInformationLength: 512, returnLength: 16
  3108. KProcessHacker: ObQueryNameString: status 0x0
  3109. KProcessHacker: KphQueryNameObject:
  3110. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000efc, ObjectInformationLength: 512, returnLength: 16
  3111. KProcessHacker: ObQueryNameString: status 0x0
  3112. KProcessHacker: KphQueryNameObject:
  3113. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f00, ObjectInformationLength: 512, returnLength: 16
  3114. KProcessHacker: ObQueryNameString: status 0x0
  3115. KProcessHacker: KphQueryNameObject: \Device\HarddiskVolume4\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11805.1001.49.0_x64__8wekyb3d8bbwe\ActivationStore.dat
  3116. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f04, ObjectInformationLength: 512, returnLength: 326
  3117. KProcessHacker: ObQueryNameString: status 0x0
  3118. KProcessHacker: KphQueryNameObject:
  3119. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f08, ObjectInformationLength: 512, returnLength: 16
  3120. KProcessHacker: ObQueryNameString: status 0x0
  3121. KProcessHacker: KphQueryNameObject:
  3122. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f0c, ObjectInformationLength: 512, returnLength: 16
  3123. KProcessHacker: ObQueryNameString: status 0x0
  3124. KProcessHacker: KphQueryNameObject:
  3125. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f10, ObjectInformationLength: 512, returnLength: 16
  3126. KProcessHacker: ObQueryNameString: status 0x0
  3127. KProcessHacker: KphQueryNameObject:
  3128. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f14, ObjectInformationLength: 512, returnLength: 16
  3129. KProcessHacker: ObQueryNameString: status 0x0
  3130. KProcessHacker: KphQueryNameObject:
  3131. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f18, ObjectInformationLength: 512, returnLength: 16
  3132. KProcessHacker: ObQueryNameString: status 0x0
  3133. KProcessHacker: KphQueryNameObject:
  3134. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f1c, ObjectInformationLength: 512, returnLength: 16
  3135. KProcessHacker: ObQueryNameString: status 0x0
  3136. KProcessHacker: KphQueryNameObject:
  3137. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f20, ObjectInformationLength: 512, returnLength: 16
  3138. KProcessHacker: ObQueryNameString: status 0x0
  3139. KProcessHacker: KphQueryNameObject:
  3140. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f24, ObjectInformationLength: 512, returnLength: 16
  3141. KProcessHacker: ObQueryNameString: status 0x0
  3142. KProcessHacker: KphQueryNameObject:
  3143. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f28, ObjectInformationLength: 512, returnLength: 16
  3144. KProcessHacker: ObQueryNameString: status 0x0
  3145. KProcessHacker: KphQueryNameObject:
  3146. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f2c, ObjectInformationLength: 512, returnLength: 16
  3147. KProcessHacker: ObQueryNameString: status 0x0
  3148. KProcessHacker: KphQueryNameObject:
  3149. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f30, ObjectInformationLength: 512, returnLength: 16
  3150. KProcessHacker: ObQueryNameString: status 0x0
  3151. KProcessHacker: KphQueryNameObject:
  3152. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f34, ObjectInformationLength: 512, returnLength: 16
  3153. KProcessHacker: ObQueryNameString: status 0x0
  3154. KProcessHacker: KphQueryNameObject:
  3155. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f38, ObjectInformationLength: 512, returnLength: 16
  3156. KProcessHacker: ObQueryNameString: status 0x0
  3157. KProcessHacker: KphQueryNameObject:
  3158. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f3c, ObjectInformationLength: 512, returnLength: 16
  3159. KProcessHacker: ObQueryNameString: status 0x0
  3160. KProcessHacker: KphQueryNameObject:
  3161. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f40, ObjectInformationLength: 512, returnLength: 16
  3162. KProcessHacker: ObQueryNameString: status 0x0
  3163. KProcessHacker: KphQueryNameObject:
  3164. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f44, ObjectInformationLength: 512, returnLength: 16
  3165. KProcessHacker: ObQueryNameString: status 0x0
  3166. KProcessHacker: KphQueryNameObject:
  3167. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f48, ObjectInformationLength: 512, returnLength: 16
  3168. KProcessHacker: ObQueryNameString: status 0x0
  3169. KProcessHacker: KphQueryNameObject:
  3170. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f4c, ObjectInformationLength: 512, returnLength: 16
  3171. KProcessHacker: ObQueryNameString: status 0x0
  3172. KProcessHacker: KphQueryNameObject:
  3173. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f50, ObjectInformationLength: 512, returnLength: 16
  3174. KProcessHacker: ObQueryNameString: status 0x0
  3175. KProcessHacker: KphQueryNameObject: \GLOBAL??\SWD#MMDEVAPI#MicrosoftGSWavetableSynth#{6dc23320-ab33-4ce4-80d4-bbb3ebbf2814}
  3176. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f54, ObjectInformationLength: 512, returnLength: 192
  3177. KProcessHacker: ObQueryNameString: status 0x0
  3178. KProcessHacker: KphQueryNameObject: \GLOBAL??\SWD#MMDEVAPI#{0.0.0.00000000}.{c9c3a3e4-f933-4c37-a624-d87a669bb43f}#{e6327cad-dcec-4949-ae8a-991e976a79d2}
  3179. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f58, ObjectInformationLength: 512, returnLength: 252
  3180. KProcessHacker: ObQueryNameString: status 0x0
  3181. KProcessHacker: KphQueryNameObject:
  3182. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f5c, ObjectInformationLength: 512, returnLength: 16
  3183. KProcessHacker: ObQueryNameString: status 0x0
  3184. KProcessHacker: KphQueryNameObject:
  3185. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f60, ObjectInformationLength: 512, returnLength: 16
  3186. KProcessHacker: ObQueryNameString: status 0x0
  3187. KProcessHacker: KphQueryNameObject:
  3188. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f64, ObjectInformationLength: 512, returnLength: 16
  3189. KProcessHacker: ObQueryNameString: status 0x0
  3190. KProcessHacker: KphQueryNameObject:
  3191. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f68, ObjectInformationLength: 512, returnLength: 16
  3192. KProcessHacker: ObQueryNameString: status 0x0
  3193. KProcessHacker: KphQueryNameObject:
  3194. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f6c, ObjectInformationLength: 512, returnLength: 16
  3195. KProcessHacker: ObQueryNameString: status 0x0
  3196. KProcessHacker: KphQueryNameObject:
  3197. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f70, ObjectInformationLength: 512, returnLength: 16
  3198. KProcessHacker: ObQueryNameString: status 0x0
  3199. KProcessHacker: KphQueryNameObject:
  3200. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f74, ObjectInformationLength: 512, returnLength: 16
  3201. KProcessHacker: ObQueryNameString: status 0x0
  3202. KProcessHacker: KphQueryNameObject:
  3203. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f78, ObjectInformationLength: 512, returnLength: 16
  3204. KProcessHacker: ObQueryNameString: status 0x0
  3205. KProcessHacker: KphQueryNameObject:
  3206. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f7c, ObjectInformationLength: 512, returnLength: 16
  3207. KProcessHacker: ObQueryNameString: status 0x0
  3208. KProcessHacker: KphQueryNameObject:
  3209. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f80, ObjectInformationLength: 512, returnLength: 16
  3210. KProcessHacker: ObQueryNameString: status 0x0
  3211. KProcessHacker: KphQueryNameObject:
  3212. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f84, ObjectInformationLength: 512, returnLength: 16
  3213. KProcessHacker: ObQueryNameString: status 0x0
  3214. KProcessHacker: KphQueryNameObject:
  3215. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f88, ObjectInformationLength: 512, returnLength: 16
  3216. KProcessHacker: ObQueryNameString: status 0x0
  3217. KProcessHacker: KphQueryNameObject:
  3218. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f8c, ObjectInformationLength: 512, returnLength: 16
  3219. KProcessHacker: ObQueryNameString: status 0x0
  3220. KProcessHacker: KphQueryNameObject:
  3221. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f90, ObjectInformationLength: 512, returnLength: 16
  3222. KProcessHacker: ObQueryNameString: status 0x0
  3223. KProcessHacker: KphQueryNameObject: \GLOBAL??\SWD#MMDEVAPI#{0.0.1.00000000}.{4cdf212f-06d2-4efa-a7c6-295293bdf202}#{2eef81be-33fa-4800-9670-1cd474972c3f}
  3224. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f94, ObjectInformationLength: 512, returnLength: 252
  3225. KProcessHacker: ObQueryNameString: status 0x0
  3226. KProcessHacker: KphQueryNameObject:
  3227. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f98, ObjectInformationLength: 512, returnLength: 16
  3228. KProcessHacker: ObQueryNameString: status 0x0
  3229. KProcessHacker: KphQueryNameObject:
  3230. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000f9c, ObjectInformationLength: 512, returnLength: 16
  3231. KProcessHacker: ObQueryNameString: status 0x0
  3232. KProcessHacker: KphQueryNameObject:
  3233. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fa0, ObjectInformationLength: 512, returnLength: 16
  3234. KProcessHacker: ObQueryNameString: status 0x0
  3235. KProcessHacker: KphQueryNameObject:
  3236. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fa4, ObjectInformationLength: 512, returnLength: 16
  3237. KProcessHacker: ObQueryNameString: status 0x0
  3238. KProcessHacker: KphQueryNameObject:
  3239. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fa8, ObjectInformationLength: 512, returnLength: 16
  3240. KProcessHacker: ObQueryNameString: status 0x0
  3241. KProcessHacker: KphQueryNameObject:
  3242. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fac, ObjectInformationLength: 512, returnLength: 16
  3243. KProcessHacker: ObQueryNameString: status 0x0
  3244. KProcessHacker: KphQueryNameObject:
  3245. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fb0, ObjectInformationLength: 512, returnLength: 16
  3246. KProcessHacker: ObQueryNameString: status 0x0
  3247. KProcessHacker: KphQueryNameObject:
  3248. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fb4, ObjectInformationLength: 512, returnLength: 16
  3249. KProcessHacker: ObQueryNameString: status 0x0
  3250. KProcessHacker: KphQueryNameObject:
  3251. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fb8, ObjectInformationLength: 512, returnLength: 16
  3252. KProcessHacker: ObQueryNameString: status 0x0
  3253. KProcessHacker: KphQueryNameObject:
  3254. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fbc, ObjectInformationLength: 512, returnLength: 16
  3255. KProcessHacker: ObQueryNameString: status 0x0
  3256. KProcessHacker: KphQueryNameObject:
  3257. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fc0, ObjectInformationLength: 512, returnLength: 16
  3258. KProcessHacker: ObQueryNameString: status 0x0
  3259. KProcessHacker: KphQueryNameObject:
  3260. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fc4, ObjectInformationLength: 512, returnLength: 16
  3261. KProcessHacker: ObQueryNameString: status 0x0
  3262. KProcessHacker: KphQueryNameObject:
  3263. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fc8, ObjectInformationLength: 512, returnLength: 16
  3264. KProcessHacker: ObQueryNameString: status 0x0
  3265. KProcessHacker: KphQueryNameObject:
  3266. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fcc, ObjectInformationLength: 512, returnLength: 16
  3267. KProcessHacker: ObQueryNameString: status 0x0
  3268. KProcessHacker: KphQueryNameObject:
  3269. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fd0, ObjectInformationLength: 512, returnLength: 16
  3270. KProcessHacker: ObQueryNameString: status 0x0
  3271. KProcessHacker: KphQueryNameObject:
  3272. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fd4, ObjectInformationLength: 512, returnLength: 16
  3273. KProcessHacker: ObQueryNameString: status 0x0
  3274. KProcessHacker: KphQueryNameObject:
  3275. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fd8, ObjectInformationLength: 512, returnLength: 16
  3276. KProcessHacker: ObQueryNameString: status 0x0
  3277. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine
  3278. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fdc, ObjectInformationLength: 512, returnLength: 190
  3279. KProcessHacker: ObQueryNameString: status 0x0
  3280. KProcessHacker: KphQueryNameObject: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine
  3281. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fe0, ObjectInformationLength: 512, returnLength: 190
  3282. KProcessHacker: ObQueryNameString: status 0x0
  3283. KProcessHacker: KphQueryNameObject:
  3284. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fe4, ObjectInformationLength: 512, returnLength: 16
  3285. KProcessHacker: ObQueryNameString: status 0x0
  3286. KProcessHacker: KphQueryNameObject:
  3287. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fe8, ObjectInformationLength: 512, returnLength: 16
  3288. KProcessHacker: ObQueryNameString: status 0x0
  3289. KProcessHacker: KphQueryNameObject:
  3290. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000fec, ObjectInformationLength: 512, returnLength: 16
  3291. KProcessHacker: ObQueryNameString: status 0x0
  3292. KProcessHacker: KphQueryNameObject:
  3293. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ff0, ObjectInformationLength: 512, returnLength: 16
  3294. KProcessHacker: ObQueryNameString: status 0x0
  3295. KProcessHacker: KphQueryNameObject:
  3296. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ff4, ObjectInformationLength: 512, returnLength: 16
  3297. KProcessHacker: ObQueryNameString: status 0x0
  3298. KProcessHacker: KphQueryNameObject:
  3299. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ff8, ObjectInformationLength: 512, returnLength: 16
  3300. KProcessHacker: ObQueryNameString: status 0x0
  3301. KProcessHacker: KphQueryNameObject:
  3302. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80000ffc, ObjectInformationLength: 512, returnLength: 16
  3303. KProcessHacker: ObQueryNameString: status 0x0
  3304. KProcessHacker: KphQueryNameObject:
  3305. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80001004, ObjectInformationLength: 512, returnLength: 16
  3306. KProcessHacker: ObQueryNameString: status 0x0
  3307. KProcessHacker: KphQueryNameObject:
  3308. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80001008, ObjectInformationLength: 512, returnLength: 16
  3309. KProcessHacker: ObQueryNameString: status 0x0
  3310. KProcessHacker: KphQueryNameObject:
  3311. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff8000100c, ObjectInformationLength: 512, returnLength: 16
  3312. KProcessHacker: ObQueryNameString: status 0x0
  3313. KProcessHacker: KphQueryNameObject:
  3314. KProcessHacker: KpiQueryInformationObject: called KphQueryNameObject: Handle: 0xffffffff80001010,
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!