Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Error: At least one required implicit or forwarded dependency was not found.
- Warning: At least one delay-load dependency module was not found.
- Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.
- --------------------------------------------------------------------------------
- Starting profile on 6/18/2019 at 10:55:38 AM
- Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Enterprise (64-bit), version 6.02.9200
- Program Executable: c:\users\buser\desktop\temp junk\2019_2\BOBBOTEST1.EXE
- Program Arguments:
- Starting Directory: C:\Users\buser\Desktop\temp junk\2019_2\
- Search Path: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Plantronics\Spokes3G\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Common Files\Seagate\VirtualFile\;C:\Program Files (x86)\Common Files\Seagate\VirtualFile64\;C:\Program Files (x86)\Common Files\Seagate\SnapAPI\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\ManagementStudio\;C:\WINDOWS\System32\OpenSSH\;C:\Users\buser\AppData\Local\Microsoft\WindowsApps;
- Options Selected:
- Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
- Log DllMain calls for process attach and process detach messages.
- Hook the process to gather more detailed dependency information.
- Log LoadLibrary function calls.
- Log GetProcAddress function calls.
- Log debug output messages.
- Automatically open and profile child processes.
- --------------------------------------------------------------------------------
- Started "BOBBOTEST1.EXE" (process 0x2078) at address 0x00007FF704BB0000. Successfully hooked module.
- Loaded "NTDLL.DLL" at address 0x00007FF856720000. Successfully hooked module.
- Loaded "KERNEL32.DLL" at address 0x00007FF8561D0000. Successfully hooked module.
- Loaded "KERNELBASE.DLL" at address 0x00007FF852DE0000. Successfully hooked module.
- DllMain(0x00007FF852DE0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "KERNELBASE.DLL" called.
- DllMain(0x00007FF852DE0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "KERNELBASE.DLL" returned 1 (0x1).
- DllMain(0x00007FF8561D0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "KERNEL32.DLL" called.
- DllMain(0x00007FF8561D0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "KERNEL32.DLL" returned 1 (0x1).
- Injected "DEPENDS.DLL" at address 0x00000000563E0000.
- DllMain(0x00000000563E0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "DEPENDS.DLL" called.
- DllMain(0x00000000563E0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "DEPENDS.DLL" returned 1 (0x1).
- Loaded "UNITYPLAYER.DLL" at address 0x00007FFFFD020000. Successfully hooked module.
- Loaded "USER32.DLL" at address 0x00007FF855B00000. Successfully hooked module.
- Loaded "WIN32U.DLL" at address 0x00007FF8528A0000. Successfully hooked module.
- Loaded "GDI32.DLL" at address 0x00007FF8561A0000. Successfully hooked module.
- Loaded "GDI32FULL.DLL" at address 0x00007FF852BF0000. Successfully hooked module.
- Loaded "MSVCP_WIN.DLL" at address 0x00007FF8528C0000. Successfully hooked module.
- Loaded "UCRTBASE.DLL" at address 0x00007FF853850000. Successfully hooked module.
- Loaded "OLE32.DLL" at address 0x00007FF855CA0000. Successfully hooked module.
- Loaded "COMBASE.DLL" at address 0x00007FF856290000. Successfully hooked module.
- Loaded "VERSION.DLL" at address 0x00007FF845E90000. Successfully hooked module.
- Loaded "RPCRT4.DLL" at address 0x00007FF856070000. Successfully hooked module.
- Loaded "BCRYPTPRIMITIVES.DLL" at address 0x00007FF8537D0000. Successfully hooked module.
- Loaded "MSVCRT.DLL" at address 0x00007FF853E60000. Successfully hooked module.
- Loaded "ADVAPI32.DLL" at address 0x00007FF853C30000. Successfully hooked module.
- Loaded "SECHOST.DLL" at address 0x00007FF855F90000. Successfully hooked module.
- Loaded "SHLWAPI.DLL" at address 0x00007FF855AA0000. Successfully hooked module.
- Loaded "SETUPAPI.DLL" at address 0x00007FF855450000. Successfully hooked module.
- Loaded "CFGMGR32.DLL" at address 0x00007FF852BA0000. Successfully hooked module.
- Loaded "BCRYPT.DLL" at address 0x00007FF852DB0000. Successfully hooked module.
- Loaded "SHELL32.DLL" at address 0x00007FF853F60000. Successfully hooked module.
- Loaded "SHCORE.DLL" at address 0x00007FF853950000. Successfully hooked module.
- Loaded "WINDOWS.STORAGE.DLL" at address 0x00007FF853080000. Successfully hooked module.
- Loaded "PROFAPI.DLL" at address 0x00007FF852740000. Successfully hooked module.
- Loaded "POWRPROF.DLL" at address 0x00007FF852770000. Successfully hooked module.
- Loaded "KERNEL.APPCORE.DLL" at address 0x00007FF8527D0000. Successfully hooked module.
- Loaded "CRYPTSP.DLL" at address 0x00007FF852D90000. Successfully hooked module.
- Loaded "WS2_32.DLL" at address 0x00007FF855A30000. Successfully hooked module.
- Loaded "OLEAUT32.DLL" at address 0x00007FF8558E0000. Successfully hooked module.
- Loaded "OPENGL32.DLL" at address 0x00007FF82C420000. Successfully hooked module.
- Loaded "WINMM.DLL" at address 0x00007FF846920000. Successfully hooked module.
- Loaded "IMM32.DLL" at address 0x00007FF856040000. Successfully hooked module.
- Loaded "GLU32.DLL" at address 0x00007FF836670000. Successfully hooked module.
- Loaded "CRYPT32.DLL" at address 0x00007FF852960000. Successfully hooked module.
- Loaded "MSASN1.DLL" at address 0x00007FF852720000. Successfully hooked module.
- Loaded "WINMMBASE.DLL" at address 0x00007FF8468F0000. Successfully hooked module.
- Loaded "WINMMBASE.DLL" at address 0x0000023B14AE0000. Successfully hooked module.
- Unloaded "WINMMBASE.DLL" at address 0x0000023B14AE0000.
- Loaded "WINMMBASE.DLL" at address 0x0000023B14AE0000. Successfully hooked module.
- Unloaded "WINMMBASE.DLL" at address 0x0000023B14AE0000.
- Loaded "HID.DLL" at address 0x00007FF851190000. Successfully hooked module.
- Loaded "WINHTTP.DLL" at address 0x00007FF84A9A0000. Successfully hooked module.
- Loaded "WINDOWSCODECS.DLL" at address 0x00007FF8456D0000. Successfully hooked module.
- Loaded "DWMAPI.DLL" at address 0x00007FF850A30000. Successfully hooked module.
- Loaded "WSOCK32.DLL" at address 0x00007FF83E870000. Successfully hooked module.
- Entrypoint reached. All implicit modules have been loaded.
- DllMain(0x00007FF853850000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "UCRTBASE.DLL" called.
- DllMain(0x00007FF853850000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "UCRTBASE.DLL" returned 1 (0x1).
- DllMain(0x00007FF8528C0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSVCP_WIN.DLL" called.
- DllMain(0x00007FF8528C0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSVCP_WIN.DLL" returned 1 (0x1).
- DllMain(0x00007FF852BF0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GDI32FULL.DLL" called.
- DllMain(0x00007FF852BF0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GDI32FULL.DLL" returned 1 (0x1).
- DllMain(0x00007FF8561A0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GDI32.DLL" called.
- DllMain(0x00007FF8561A0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GDI32.DLL" returned 1 (0x1).
- DllMain(0x00007FF855B00000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "USER32.DLL" called.
- DllMain(0x00007FF855B00000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "USER32.DLL" returned 1 (0x1).
- DllMain(0x00007FF853E60000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSVCRT.DLL" called.
- DllMain(0x00007FF853E60000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSVCRT.DLL" returned 1 (0x1).
- DllMain(0x00007FF845E90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "VERSION.DLL" called.
- DllMain(0x00007FF845E90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "VERSION.DLL" returned 1 (0x1).
- DllMain(0x00007FF856070000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "RPCRT4.DLL" called.
- DllMain(0x00007FF856070000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "RPCRT4.DLL" returned 1443706113 (0x560D3501).
- DllMain(0x00007FF8537D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "BCRYPTPRIMITIVES.DLL" called.
- DllMain(0x00007FF8537D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "BCRYPTPRIMITIVES.DLL" returned 1 (0x1).
- DllMain(0x00007FF856290000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "COMBASE.DLL" called.
- DllMain(0x00007FF856290000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "COMBASE.DLL" returned 1 (0x1).
- DllMain(0x00007FF855F90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SECHOST.DLL" called.
- DllMain(0x00007FF855F90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SECHOST.DLL" returned 1 (0x1).
- DllMain(0x00007FF853C30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "ADVAPI32.DLL" called.
- DllMain(0x00007FF853C30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "ADVAPI32.DLL" returned 1 (0x1).
- DllMain(0x00007FF855CA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OLE32.DLL" called.
- DllMain(0x00007FF855CA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OLE32.DLL" returned 1 (0x1).
- DllMain(0x00007FF855AA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHLWAPI.DLL" called.
- DllMain(0x00007FF855AA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHLWAPI.DLL" returned 1 (0x1).
- DllMain(0x00007FF852BA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CFGMGR32.DLL" called.
- DllMain(0x00007FF852BA0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CFGMGR32.DLL" returned 1 (0x1).
- DllMain(0x00007FF852DB0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "BCRYPT.DLL" called.
- DllMain(0x00007FF852DB0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "BCRYPT.DLL" returned 1 (0x1).
- DllMain(0x00007FF855450000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SETUPAPI.DLL" called.
- DllMain(0x00007FF855450000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SETUPAPI.DLL" returned 1 (0x1).
- DllMain(0x00007FF853950000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHCORE.DLL" called.
- DllMain(0x00007FF853950000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHCORE.DLL" returned 1 (0x1).
- DllMain(0x00007FF852740000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "PROFAPI.DLL" called.
- DllMain(0x00007FF852740000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "PROFAPI.DLL" returned 1 (0x1).
- DllMain(0x00007FF852770000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "POWRPROF.DLL" called.
- DllMain(0x00007FF852770000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "POWRPROF.DLL" returned 1 (0x1).
- DllMain(0x00007FF8527D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "KERNEL.APPCORE.DLL" called.
- DllMain(0x00007FF8527D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "KERNEL.APPCORE.DLL" returned 399322369 (0x17CD2D01).
- DllMain(0x00007FF853080000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINDOWS.STORAGE.DLL" called.
- DllMain(0x00007FF853080000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINDOWS.STORAGE.DLL" returned 1 (0x1).
- DllMain(0x00007FF852D90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CRYPTSP.DLL" called.
- DllMain(0x00007FF852D90000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CRYPTSP.DLL" returned 1 (0x1).
- DllMain(0x00007FF853F60000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHELL32.DLL" called.
- DllMain(0x00007FF853F60000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "SHELL32.DLL" returned 1 (0x1).
- DllMain(0x00007FF836670000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GLU32.DLL" called.
- DllMain(0x00007FF836670000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "GLU32.DLL" returned 1 (0x1).
- DllMain(0x00007FF82C420000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OPENGL32.DLL" called.
- GetProcAddress(0x00007FF8561A0000 [GDI32.DLL], "GdiAddGlsRecord") called from "OPENGL32.DLL" at address 0x00007FF82C42A9C4 and returned 0x00007FF8561A96E0.
- GetProcAddress(0x00007FF8561A0000 [GDI32.DLL], "GdiAddGlsBounds") called from "OPENGL32.DLL" at address 0x00007FF82C42A9DB and returned 0x00007FF8561A96C0.
- GetProcAddress(0x00007FF8561A0000 [GDI32.DLL], "GdiIsMetaPrintDC") called from "OPENGL32.DLL" at address 0x00007FF82C42A9F2 and returned 0x00007FF8561A9EC0.
- DllMain(0x00007FF82C420000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OPENGL32.DLL" returned 1 (0x1).
- DllMain(0x00007FF8468F0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINMMBASE.DLL" called.
- DllMain(0x00007FF8468F0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINMMBASE.DLL" returned 1 (0x1).
- DllMain(0x00007FF846920000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINMM.DLL" called.
- DllMain(0x00007FF846920000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINMM.DLL" returned 1 (0x1).
- DllMain(0x00007FF855A30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WS2_32.DLL" called.
- DllMain(0x00007FF855A30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WS2_32.DLL" returned 1 (0x1).
- DllMain(0x00007FF8558E0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OLEAUT32.DLL" called.
- DllMain(0x00007FF8558E0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "OLEAUT32.DLL" returned 1 (0x1).
- DllMain(0x00007FF856040000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "IMM32.DLL" called.
- DllMain(0x00007FF856040000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "IMM32.DLL" returned 1 (0x1).
- DllMain(0x00007FF84A9A0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINHTTP.DLL" called.
- DllMain(0x00007FF84A9A0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINHTTP.DLL" returned 1 (0x1).
- DllMain(0x00007FF851190000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "HID.DLL" called.
- DllMain(0x00007FF851190000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "HID.DLL" returned 1 (0x1).
- DllMain(0x00007FF852720000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSASN1.DLL" called.
- DllMain(0x00007FF852720000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "MSASN1.DLL" returned 1 (0x1).
- DllMain(0x00007FF852960000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CRYPT32.DLL" called.
- DllMain(0x00007FF852960000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "CRYPT32.DLL" returned 1 (0x1).
- DllMain(0x00007FF8456D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINDOWSCODECS.DLL" called.
- DllMain(0x00007FF8456D0000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WINDOWSCODECS.DLL" returned 1 (0x1).
- DllMain(0x00007FF850A30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "DWMAPI.DLL" called.
- DllMain(0x00007FF850A30000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "DWMAPI.DLL" returned 1 (0x1).
- DllMain(0x00007FF83E870000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WSOCK32.DLL" called.
- DllMain(0x00007FF83E870000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "WSOCK32.DLL" returned 1 (0x1).
- DllMain(0x00007FFFFD020000, DLL_PROCESS_ATTACH, 0x00000062565CF900) in "UNITYPLAYER.DLL" called.
- LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x0000000000000000, 0x00000800) called from "UNITYPLAYER.DLL" at address 0x00007FFFFE250911.
- LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x0000000000000000, 0x00000800) returned 0x00007FF852DE0000.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "InitializeCriticalSectionEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2509C6 and returned 0x00007FF852E47C80.
- LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x0000000000000000, 0x00000800) called from "UNITYPLAYER.DLL" at address 0x00007FFFFE250911.
- LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x0000000000000000, 0x00000800) returned 0x00007FF852DE0000.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "FlsAlloc") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2509C6 and returned 0x00007FF852E56CB0.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "FlsSetValue") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2509C6 and returned 0x00007FF852E31970.
- LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x0000000000000000, 0x00000800) called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274A45.
- LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x0000000000000000, 0x00000800) returned 0x00007FF852DE0000.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "InitializeCriticalSectionEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274AFA and returned 0x00007FF852E47C80.
- LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x0000000000000000, 0x00000800) called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274A45.
- LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x0000000000000000, 0x00000800) returned 0x00007FF852DE0000.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "FlsAlloc") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274AFA and returned 0x00007FF852E56CB0.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "FlsGetValue") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274AFA and returned 0x00007FF852DFC8B0.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "FlsSetValue") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274AFA and returned 0x00007FF852E31970.
- LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x0000000000000000, 0x00000800) called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274A45.
- LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x0000000000000000, 0x00000800) returned 0x00007FF852DE0000.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "LCMapStringEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE274AFA and returned 0x00007FF852E10090.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FlsAlloc") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223912 and returned 0x00007FF8561EE440.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FlsFree") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223930 and returned 0x00007FF8561EE770.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FlsGetValue") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE22394E and returned 0x00007FF8561E6BA0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FlsSetValue") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE22396C and returned 0x00007FF8561EB690.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE22398A and returned 0x00007FF8561F2190.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "InitOnceExecuteOnce") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2239A8 and returned 0x00007FF852E3CD20.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateEventExW") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2239C6 and returned 0x00007FF8561F20F0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateSemaphoreW") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE2239E4 and returned 0x00007FF8561F2160.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateSemaphoreExW") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A02 and returned 0x00007FF8561F2150.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateThreadpoolTimer") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A20 and returned 0x00007FF8561EB8F0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SetThreadpoolTimer") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A3E and returned 0x00007FF85676EF50.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "WaitForThreadpoolTimerCallbacks") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A5C and returned 0x00007FF85676CD00.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CloseThreadpoolTimer") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A7A and returned 0x00007FF85675E600.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateThreadpoolWait") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223A98 and returned 0x00007FF8561EF1D0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SetThreadpoolWait") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223AB6 and returned 0x00007FF85675DBE0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CloseThreadpoolWait") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223AD4 and returned 0x00007FF85675E460.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FlushProcessWriteBuffers") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223AF2 and returned 0x00007FF8567C13C0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "FreeLibraryWhenCallbackReturns") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223B10 and returned 0x00007FF8567A2860.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetCurrentProcessorNumber") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223B2E and returned 0x00007FF8567C40A0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateSymbolicLinkW") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223B4C and returned 0x00007FF8561F1A60.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetCurrentPackageId") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223B6A and returned 0x00007FF852E57C20.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetTickCount64") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223B88 and returned 0x00007FF8561E6B60.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetFileInformationByHandleEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223BA6 and returned 0x00007FF8561EB7E0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SetFileInformationByHandle") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223BC4 and returned 0x00007FF8561F2700.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetSystemTimePreciseAsFileTime") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223BE2 and returned 0x00007FF8561F27E0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "InitializeConditionVariable") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C00 and returned 0x00007FF856791C20.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "WakeConditionVariable") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C1E and returned 0x00007FF85679D1E0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "WakeAllConditionVariable") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C3C and returned 0x00007FF85678A8B0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SleepConditionVariableCS") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C5A and returned 0x00007FF852E5CB80.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "InitializeSRWLock") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C78 and returned 0x00007FF856791C20.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "AcquireSRWLockExclusive") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223C96 and returned 0x00007FF856771900.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "TryAcquireSRWLockExclusive") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223CB4 and returned 0x00007FF8567A78E0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "ReleaseSRWLockExclusive") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223CD2 and returned 0x00007FF85676FF30.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SleepConditionVariableSRW") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223CF0 and returned 0x00007FF852DFEE80.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CreateThreadpoolWork") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223D0E and returned 0x00007FF8561ECA40.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "SubmitThreadpoolWork") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223D2C and returned 0x00007FF85676FBB0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CloseThreadpoolWork") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223D4A and returned 0x00007FF85675E6A0.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "CompareStringEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223D68 and returned 0x00007FF8561E5820.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223D86 and returned 0x00007FF8561EC000.
- GetProcAddress(0x00007FF8561D0000 [KERNEL32.DLL], "LCMapStringEx") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE223DA4 and returned 0x00007FF8561E66B0.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "InitializeConditionVariable") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE22483C and returned 0x00007FF856791C20.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "SleepConditionVariableCS") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE224850 and returned 0x00007FF852E5CB80.
- GetProcAddress(0x00007FF852DE0000 [KERNELBASE.DLL], "WakeAllConditionVariable") called from "UNITYPLAYER.DLL" at address 0x00007FFFFE224864 and returned 0x00007FF85678A8B0.
- Loaded "WINTRUST.DLL" at address 0x00007FF852B40000. Successfully hooked module.
- DllMain(0x00007FF852B40000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "WINTRUST.DLL" called.
- DllMain(0x00007FF852B40000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "WINTRUST.DLL" returned 1 (0x1).
- Loaded "IMAGEHLP.DLL" at address 0x00007FF8565C0000. Successfully hooked module.
- DllMain(0x00007FF8565C0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "IMAGEHLP.DLL" called.
- DllMain(0x00007FF8565C0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "IMAGEHLP.DLL" returned 1 (0x1).
- Loaded "RSAENH.DLL" at address 0x00007FF851900000. Successfully hooked module.
- DllMain(0x00007FF851900000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "RSAENH.DLL" called.
- DllMain(0x00007FF851900000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "RSAENH.DLL" returned 1 (0x1).
- Loaded "CRYPTBASE.DLL" at address 0x00007FF852170000. Successfully hooked module.
- DllMain(0x00007FF852170000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "CRYPTBASE.DLL" called.
- DllMain(0x00007FF852170000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "CRYPTBASE.DLL" returned 1 (0x1).
- Loaded "GPAPI.DLL" at address 0x00007FF8511A0000. Successfully hooked module.
- DllMain(0x00007FF8511A0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "GPAPI.DLL" called.
- DllMain(0x00007FF8511A0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "GPAPI.DLL" returned 1 (0x1).
- Loaded "CRYPTNET.DLL" at address 0x00007FF83ED90000. Successfully hooked module.
- DllMain(0x00007FF83ED90000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "CRYPTNET.DLL" called.
- DllMain(0x00007FF83ED90000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "CRYPTNET.DLL" returned 1 (0x1).
- Loaded "IPHLPAPI.DLL" at address 0x00007FF851D00000. Successfully hooked module.
- DllMain(0x00007FF851D00000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "IPHLPAPI.DLL" called.
- DllMain(0x00007FF851D00000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "IPHLPAPI.DLL" returned 1 (0x1).
- Loaded "WINNSI.DLL" at address 0x00007FF84B920000. Successfully hooked module.
- Loaded "NSI.DLL" at address 0x00007FF8558D0000. Successfully hooked module.
- DllMain(0x00007FF8558D0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "NSI.DLL" called.
- DllMain(0x00007FF8558D0000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "NSI.DLL" returned 1 (0x1).
- DllMain(0x00007FF84B920000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "WINNSI.DLL" called.
- DllMain(0x00007FF84B920000, DLL_PROCESS_ATTACH, 0x0000000000000000) in "WINNSI.DLL" returned 1 (0x1).
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement